informant july-dec 08

57

Upload: motojime

Post on 15-Jul-2015

337 views

Category:

Documents


0 download

TRANSCRIPT

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 1/57

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 2/57

 

Since 1998, the average state excise tax on a pack of cigarettes has nearly tripled. Today statecigarette excise tax rates range from 7¢ a pack in South Carolina to $2.75 a pack in New York State. These much higher - and different - taxes create a big incentive for contraband cigarette trafficking.

Law enforcement investigations show that groups engaged in the contraband cigarette tradehave been associated with counterfeiting, drug trafficking and financial crimes such as moneylaundering. To learn about this issue and our programs that support law enforcement efforts to addresscontraband cigarette-related activity, please call PM USA toll-free at 877-224-3487.

Higher price = greater incentive

SPONSORED BY THE BRAND INTEGRITY DEPARTMENT OF ALTRIA CLIENT SERVICES ON BEHALF OF PHILIP MORRIS USA

www.phil ipmorr isusa.com

PhilipMorrisUSAan Altria Company

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 3/57

 

Microsoft applauds the work of 

The National White Collar Crime Center

and the organization’s dedication to fighting cyber crime.

By supporting the work of investigative bodies

across the nation, and providing much needed

training to law enforcement, NW3C plays

a critical role in helping protect our families,

our businesses and our identities online.

Microsoft

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 4/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 84

 

Source *WWW.ODM

P J 21-J 30, 2008

O BFredericksburg Police Department, VA

D R BIndiana State Police, IN

O V L BMarion County Sheri’s Department, IA

J S Bexas Department o Public Saety, X

S I L J. CSanta Barbara County District Attorney’s Oce, CA

O N CNew Orleans Police Department, LA

S R F Prince George’s County Police Department, MD

O G GHouston Police Department, X

O N HPueblo Police Department, CO

O E D Hucson Police Department, AZ

S R C. LB Arkansas State Police, AR

S S LPhiladelphia Police Department, PA

S C V A. L, S.Dallas Police Department, X

O F MNew York City Police Department, NY

O D OCleveland Police Department, OH

O R “R” SLos Angeles Police Department, CA

D S M S TBibb County Sheri’s Oce, GA

D S J TKern County Sheri’s Department, CA

 

NW3C RemembeRs OuR membeR AgeNCie

HeROes Killed iN tHe liNe Of duty*

N » imaMt%MI >millUn ih

k l l l l » | \ INI MM of HI IV

¦

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 5/57

 

contentsInformant

h p : / / i . w 3 .

Features:

34 Network and 

Computer IntrusionsNW3C’s Computer Crime

Specialist introduces readers to

the topic of Computer Intrusions.

Nick Newman

36 Cyber-Riots in the

Eastern Block Ever consider just how much we

depend on the Internet in our daily 

lives? And what would happen if it 

malfunctioned? It happened to the small 

country of Estonia. Read about how the country was brought to its knees

by a gang of cyber-rioters and how.

Nick Newman

38 Stealing the Internet:

Broadband Theft  

Think free WIFI is the greatest thingnext to sliced bread? Maybe not for the

companies and business responsible for 

the Internet bill. Follow an international 

case summary where the stolen item

is – broadband Internet connections.

T.R. Sreekanth

40 Computer & Netw

IntrusionsComputer hackers aren’t

searching for credit card nu

Follow this case study from t

County Sheriff’s Ofice and read h

employees used illegal intrusion m

to steal information from their em

Sgt. Jonathan W

42 Securing Networ

DataThe T.J. Maxx scandal con

that network security contin

be a major issue for business

individuals. This article provide

network protection and prevent

to keep your data safe from in

Robert Holtfrete

44 Combating Adap

 AdversariesToday most people rely on com

to collect and analyze large amo

data. However, cyber research

say that the human brain is still t

system for recognizing patterns i

This article will introduce new

tools to allow users to easily extr

dissect unusual patterns in cybe

Carl Cohen

42

40

44

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 6/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 86

In This Issue:

14  Mobile Forensic World 

ConferenceTim Wedge

15   Fraud Gold Diggers 

Mark Mathosian

16  Health Care Fraud  

Charles Starr 

17   IC3 Trends 

  Aaron Naternicola

18  Criminal Information

System Liability  

Christian Desilets

 22  Case Highlights

 27   Bedford County Sheriff’s

Ofice 

Craig Butterworth

 29  Using Grants to Your 

 Advantage

30  Technical Terms for 

‘Not-So-Savvy’ Computer 

Enthusiasts! 

32  Instructor Spotlight 

33  Behind the Scenes

  Justin Wykes

 

46  CY-FI: The Future of 

Cyber Forensics 

Dr. Marcus K. Rog

47   What is SWGDE? 

Beth Whitney 

47  Classifying Child Porn Im

in Law Enforcement Case

Kate Seigfried 

48  From Street Corners to

Computers: Investigat

Tips for Cyberbanging

Donald F. Cesaret

50   After the Bust: Recovering

Known Videos in Unalloc

Space

Sgt. Glenn Lang

52  The Business of Drive

License Fraud 

Dean Reynolds

55   Convicted Swindler Sh

Light on Investment Sca

Mark Mathosian

56  Straw Ownerships:

Please Operate Respons

  Antonio Ribera

58  Member Success Stori

63  NW3C Cartoons

contentsInformant

 27 

56

46

 

CY-FI:

T Futuf CybFic

With less than 80 employees and a ter-ritory of 764 square miles, the Bedford County Sheriff’s Ofice has earned a bigreputation throughout the country. Catchup on the latest projects of the Bedford County Sheriff’s Ofice and learn how they 

 get it all done.

Purdue University’s Dr. Marc Rogers leadsthe discussion on Macintosh forensics inhis second column.

Those quick runs to the corner liquor store are convenient, but where does your money actually go? Read about liquor store straw ownerships, and how they can connect to larger organized criminal 

organizations.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 7/57

 

h p : / / i . w 3 .

  Tis project was supported by Grant No. 2007-WC-CX-K001 awarded by the Bureau o Justice Assistance. Te Bureau o Justice Assistan

component o the Ofce o Justice Programs, which also includes the Bureau o Justice Statistics, the National Institute o Justice, the Ofce o Ju

 Justice and Delinquency Prevention, and the Ofce or Victims o Crime. Points o view or opinions in this document are those o the auth

do not represent the ofcial position or policies o the United States Department o Justice.

E S Dr. Marcia Williams, Loreal Bond, Craig Butterworth,Cam Brandon

G D  Jaycen Saab, Lindsey Bousfeld

S C

M R, P.D., P U 

Mc Rgs, Ph.D., CISSP, CCCI s h Ch hCyb Fnscs Pg n h Dp. Cpu &Inn chngy Pudu. H s n AsscPss nd sch cuy b h Cn Educn nd Rsch n Inn Assunc

nd Scuy (CERIAS). D. Rgs s b hquy ssunc bd (ISC) 2’s SCCP dsgnn,nd s h Innn Ch h Lw, Cpncnd Invsgn Dn h Cn Bdy  Knwdg (CBK) c.

H s pc dcv wh wkd n h  ud nd cpu c nvsgns. D. Rgs sh c-d h Jun Dg Fnsc Pccnd h Jun Dg Fnscs Scuy nd Lw, ndss n h d bd sv h pssn juns.

contributorsInformant

Glen Gainer, IIIPaul CordiaKathleen Kempley Christopher Cotta

Denise Voigt CrawMichael BrownSean M. Rooney 

NW3C Board of Directors

O C: J C, NWC N A

N N, C C S, NWC

Nck Nwn jnd NW3C n 2006 s Cpu CSpcs. M. Nwn hs bn cgnzd nus hs xcnc n schng cpu scuy pcs, wng cpu nscs swus n h LE cuny, nd svng chnc d

H s s gu nd DEFCON nd Bckh w gs hck cnvnns n h wd.

J C, N A, NWC

Jy Cnnn hds Bch Scnc n CScnc wh n phss n Cpu Scuy, Fnd Lw Lngwd Unvsy. H cuny s nwk dns NW3C nd hs bn h v y.

NW3PN A T I O N A L W H I T E C O L L A R C R I M E C E N T E R

I N T E G R I T Y Q U A L I T Y S E R V I C E

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 8/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 88

N ew Nw  3  C M eMbers 

NW3C welcomes its new members. Te following agencies became members betweenFebruary and June 2008!

ND

SD

NE

KS

MN

IA

MO

 WI

IL

 TX

OK AR

LA

MS AL

 WA

OR

NV

CA

MT

ID WY 

UTCO

 AZNM

ME

VT

NH

MA

CTRI

MI

IN OHNJ

PA

NY 

MD

DE

FL

GA

SC

NC

 

VA

 WV

 TN

KY D.C.

M A J 0, 2008: 2,849

GREA LAKES

District of ColumbiaDistrict o Columbia Oce o the Attorney 

General

U.S. DHS - Customs & Border Protection - Oice

o Internal Aairs - Special Investigations Unit

DelawareCheswold Police Department

IndianaBremen Police Department

Frankort Police DepartmentHamilton County Prosecutor’s Oce

MarylandMunster Police Department

New Albany Police Department

Frederick County Sheri ’s Oce

U.S. District Court - Probation & Pretrial

Services - District o Maryland

MichiganAntrim County Sheri’s Oce

Bloomfeld ownship Police Department

Clio Police Department

Muskegon County Sheri ’s DepartmentOttawa County Sheri ’s Oce

U.S. Department o Veterans Aairs

Police Service - Battle Creek 

Wixom Police Department

New JerseyBogota Police Department

Essex County Prosecutor’s Oce

Medord ownship Police Department

U.S. District Courts - Pretrial Services

Agency - District o New Jersey 

Woolwich ownship Police Department

New YorkBeacon Police Department

Briarcli Manor Police Department

Cayuga County Sheri’s Oce

New York City Department o Finance -

Enorcement Division

New York State Oce o the Medicaid

Inspector General - Bureau o Investigations

& Enorcement

U.S. Probation Oce - Southern District o 

New York 

OhioEvendale Police Department

Greene County Adult Probation

Department

Union County Sheri’s Oce

University o Akron Police Department

PennsylvaniaDelaware County Sheri’s Oce

Lansdowne Police Department

Pennsylvania Gaming Control Board -

Bureau o Investigations & Enorcement

Spring Garden ownship Police

roy Borough Police Department

U.S. Department o Justice - National Drug

Intelligence Center

MIDWES

IowaFort Dodge Police Department

Winnebago County Sheri ’s Oce

IllinoisDanville Police Department

Fairview Heights Police Department

Hinsdale Police Department

Moline Police Department

KansasBurrton Police Department

Sedgwick County Sheri’s Oce

MissouriBuchanan County Sheri ’s

Department

Wellsville Police Department

NebraskaDawson County Sheri’s Oce

Kearney Police Department

U.S. District Court - Probation Oc

District o Nebraska

York Police Department

WisconsinJeerson County Sheri’s Oce

Merrill Police Department

MOUNAIN

ArizonaArizona Department o ransportatio

Oce o Inspector General

ColoradoSimla Police Department

IndianaRigby Police Department

MontanaCascade County Sheri - Coroner’s O

New MexicoRoswell Police Department

UtahLogan City Police Department

3r-A-

AT IT A\ "X"B<S

MOUNTAIN

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 9/57

 

h p : / / i . w 3 .

 A S KBarbara

Hv qusns bu bshpwh NW3C? Cnc Bb Shns,Mbshp Svcs Supvs 800-221-4424 x. 3336, by - [email protected].

Bu Cuny Sh’s OcCubus Dvsn PcDupg Cuny Sh’s OcEhus Pc DpnGwnn Cuny Pc DpnHs Cuny Dsc Any’s OcNw Yk S PcNwn Pc DpnSc Scuy Adnsn - Oc h Inspc Gn Gnd Rpds Fd OcU.S. Ps Inspc - An Dvsn

Thank you to the following MemberAgencies for referring new members!

?

WyomingPlatte County Sheri’s Oce

NORHEAS

ConnecticutEastern Connecticut State University 

Police Department

Norwalk Police Department

Stonington Police Department

Wilton Police Department

MassachusettsCarlisle Police Department

Plymouth Police Department

MaineNorth Berwick Police Department

Oxord County Sheri’s Oce

Presque Isle Police Department

New HampshireDover Police Department

SOUH CENRAL

AlabamaChilton County Sheri’s Oce

Springville Police DepartmentU.S. District Courts - Probation Oce -

Northern District o Alabama

U.S. Secret Service – Birmingham Field Oce

ArkansasUniversity o Central Arkansas Police

Department

OklahomaCarl Albert State College Campus Police

Department

Cimarron County Sheri’s Department

Oklahoma State Auditor & Inspector’s Oce

exasAmarillo Police Department

Austin County Sheri’s Oce

Bell County District Attorney’s Oce

Brown County Sheri ’s Oce

Jeerson County Sheri’s Oce

Seabrook Police Department

exas Department o Housing & Community 

Aairs - Manuactured Housing Division -

Consumer Protection

U.S. DHS - Immigration & Customs

Enorcement - Oce o Investigations – Houston

SOUHEASFloridaMadison County Sheri ’s Oce

Pensacola Police Department

Saint Petersburg Police Department

Santa Rosa County Sheri ’s Oce

GeorgiaBraselton Police Department

Douglas County Sheri’s Oce

Duluth Police Department

East Point Police Department

Fulton County Police Department

Lawrenceville Police Department

KentuckyBell County Sheri ’s Department

Corbin Police Department

Jessamine County Sheri’s Oce

Morehead State University Police

North CarolinaSurry Community College Police Department

U.S. District Court - Probation & Pretrial

Services - Western District o North Carolina

ennessee

Shelby County District Attorney’s OceVirginiaBrunswick County Sheri’s Oce

New Kent County Sheri ’s Oce

U.S. Department o Justice - Drug Enorcement

Administration - Digital Evidence Laboratory 

WES

CaliforniaCompton College Police Department

Compton Unifed School District Police

Department

Emeryville Police Department

ruckee Police DepartmentYolo County District Attorney’s Oce

NevadaLas Vegas Paiute ribal Police Department

OregonAshland Police Department

Multnomah County Department o 

Community Justice

U.S. District Court - Pretrial Services

District o Oregon

Washington County Sheri ’s Oce

Woodburn Police Department

WashingtonBonney Lake Police Department

INERNAIONALCanadaBritish Columbia Ministry o Public Saet

Solicitor General - Gaming Policy & Eno

Branch - Registration & Certifcation

FinlandFinland National Bureau o Investiga

Money Laundering Clearing House

PalauRepublic o Palau Oce o the

Independent Counsel

WEST

¦"¦¦¦.y :: -T]j; ¦ '. :;:v. '

f ,;; : p-> : - r..

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 10/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 810

Member Agency Spotlight

Bedford County is located in the foothills of south-ws Vgn jus usd h cy  Lynchbug. Fundd n 1764, hBdd Cuny Sh’s Oc(BCSO) s nny-ccd-d w ncn gncy wh ny 80 pys.T Bdd Cuny Sh- ’s Oc hs bn vngb NW3C sncMy 1998.

Bdd Cuny Sh’sOc s h h Suh-n Vgn Inn CsAgns Chdn (SOVA-ICAC) sk c. Fy knwns ‘Opn Bu Rdg Tund’,h un s jus n 59 such sk cs n h cuny. T Bdd Cuny Sh ’s O-c s s h bhpc h S Sun’ Fundn- nn-p gnzn h ducs h pubc bu In-

n cs nvvng chdn. T S Sun’ Fund-n hs nsd h hp nub Hywd nd

pssn sps cbs hp g h gn’s ssg u h sss.

Sh Mk Bwn hds up Bdd’s’s Oc. Bwn- d Sn S

Agn wh h Buu Achbcc nd Fs nd Supp Spcs wh h CIcd Sh n 1996. In dd

hs s Suhs Rgn Mb NW3C, Bwn

svs s b h BDcs h Nn Shscn; s w s h Bd

ss h Lw Encn InnCn, Unvsy nnss. In

2008, Sh Mk Bwn ws hnLs Angs Cuncb Rchdcn png g-ppp In

sy chdn. Fnd Sh Bwn nd vp w ncn, Ac Ek Esd whnd hs cn pcng chdn

Te Bedord County Sherri ’s Oce and its prograalso popular among well-known celebrities. includinren Nelson, Miss America 2007, who oen travelsBrown to promote these children saety programs. q

“I’ I

.” S B

E th y Sh Bown tvd to th wt ot wh th Lo Ang

Cty Coun pd outon honong th hvnt o on o h

 vot u- th S Sun’ Foundton. Ao on hnd o th ony

w to Ek Etd, on o Bown’ ny bty nd nd n dnt 

uppot o w nont vywh.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 11/57

 

M embe r s ’

Want to share how your agency benefits from NW

 M embership? Send your story and comments [email protected] .

p l a t f o rM

A M, H 8,000 10,000 computer orensics an important part o raud investigations – both client and employee.

In 2001, a partnership was ormed with digital and raud investigators within Hennepin County to prcomputer orensics within one county department called the Digital Forensic Investigation eam. Over timteam grew and today it provides countywide digital orensic investigations including cases involving empmisconduct as well as administrative, civil and criminal activity. Investigations are typically conducted withlocal government o Hennepin County. However, the team also provides orensics in conjunction with localand ederal authorities.

Although the team has the combined experience o over 50 years in orensics investigation and 140 yeinormation technology, they still need specialized training and support. NW3C plays an essential role in maint

these necessary skills or competent and cominvestigations. Some o the ways the Digital Fo

Investigation Team is using NW3C includelearned in Cyber Cop and Financial Rcourses or data recovery and oreInternet analysis, and fnancial

investigations; networking opportu

at the NW3C Economic & HighCrime Summits; and assistanceextremely knowledgeable Ntrainers and sta.

Te team is looking orwaattending the upcoming AnNotebook session in Minneas it will provide a much n

tool or organizing their increacomplex investigations. q

H C H S & P H D -F I U, M, MN(Member since February 2003)

Te Hennepin County Digital Forensic Investigation eammembers: Judy Regenscheid, Digital Forensic Investigationeam Manager; Jason Bergum; Christopher Droege; MikeHolt; Barbara Madden; Marque Nelson, Member AgencyRepresentative; Anthony Pollock; John Quimby; Craig roska.Not pictured, Mik Holt.

Representatives from NW3C  M ember Ageshare their stories, experiences and comm

about NW3C services.

w w w . w 3 .

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 12/57

p l a t f o rM 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 812

, cnsny chngng dscpn. Nwh h pd chngs

n chngy, s nd pccs ppn hn n h  b dvc nscs. d, h v 600 knwn ds c phns nd PDAs, wh n unvs sndds gdngsw & hdw ncs. As h cpxy nd vy  hs dvcs hs qucky spd upwd, s hs h nd pdcvy dssb d h. hs dvcs cn cnn d ss nn; cnbnd gs, gphysccn, ncng nd ugng cs, nd uch . hsnn hs bn cc n ny knds nvsgns ngng dny h css chd xpn nd vn hcdnd h vn cs. As ny c h cn b cds ky nvv n hs dvcs. Invsgvgncs wdwd c dunng chng n bnng h snd nng h nvsgs wh nd h.

En h Mb Fnscs Wd cnnc.

h bnchd Pudu Unvsy’s Pss Rck Msn, h

Mb Fnscs Wd Cnnc s nndd bng nvsgs v h wd nd pvd h wh g ccss s nd nng. M pny, s n pvd u sh ds, pcc ssns nd, nd s wnss hny ssus h c b dvc nscs. Ny 300 pp, 144 dn gncs nd 14 dn cuns pcpd nh cnnc, ncudng nds nd xhbs. h cnncws hd n Chcg, IL, USA, nd n My 8 My 10.

h cnnc bnd vy hghy-quspks bh h pubc nd pv sc. And

b pck up vub nn nd nsgh ny 32 dn nv psnns nd bku ss w s vw h pducs, s, nd svcs hn 50 dn nn-p nd -p xhbhnk) ud s h bs spks u h n h b nscs. h ds h shwd up nd psnsuds nvvng h us CDR nd GSP gs y shw uch b dvc nscs pys n cn nvsgns,” sys Nck Nwn, NW3C cc spcs, nd b NW3C’s b dvc nng . “I ws g cnnc.”q

Th 2009 onn po to b vn btt, nd w b  Jun 1-6, 2009. Anyon nttd n ndng out o bonn n vt th MFW Wb t t:

http://www.mobileforensicsworld.com/PreparingMFW200

 About the Author 

im Wedge has been a Computer Crime Specialist with the Nationa

Collar Crime Center (NW3C) since 2001. In 2004 he was selected to NW3C’s Program Support Center located on the campus o Purdue Un

in West Laayette, Indiana. A partnership between the Indiana Stat

Purdue University and NW3C, the Program Support Center is one o ters located throughout the United States. Hubs o interaction and co

tion, these Centers assist in the creation, support and maintenance o

alliances between law enorcement, academia and the private sector.

 At Purdue, im is also a visiting aculty member where he provide

ing and technical assistance to both students and law enorcement ous aspects o computer crime.

 Mob Fon Wod hotd by Pudu Unvty’

Cog o Thnoogy.

NW3C Coput C Spt, Jutn Wyk nb Fon Conn ttnd.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 13/57

 

h p : / / i . w 3 .

H ? I  hgh hn hs ys. Wh ny nvss buyng gd

h s , h k s p nvsn ud scs.In h ps, cks usd udun hds k dvng  nvss h pcus s k. h ssns bnd h ps bu hw w cn pc usvs dy.

h gd sch ccud n h 1970’s dung n cnccssn. w bhs F. Ludd, FL pd pcuss bkg busnss nd Innn Gd BunExchng (IGBE). IGBE pubshd cu ss bchus, hdks nd sd pcus s nvsns h pubc.h cncp ws sp. Buy gd sv dy cv pcsnd s yu s , h sck k ss vng up.

hs d d s uch sns h husnds nvss

puchsd pcus s hugh IGBE. IGBE d sy yu buy h s nd sy pc yu nvsn. A sh’s wh hy sd.

L’s ssu n nvs wnd buy $10,000 wh gd bun.hy wud cnc IGBE nd n h h nnns. IGBEwud ps buy h s h n h pn k nd shph s h n xchng yu ny. Bu IGBE hd hds. Insd kng pssssn h gd, why n v whIGBE skpng? IGBE wud s h nvs’s gd und ck nd ky n h cpny vu n F. Ludd. h wy, whn hy w dy s, hy hd d ws phn IGBE, qusngh bk h nscn nd snd chck h nvs.

pv yu cuy wnd pcus s, IGBE wud sndyu “cc wnshp.” Yu cud hn dps hs ppcc n yu s dps bx un yu w dy s.

A w ys pssd nd h sck k sd sng. I ws s gd nd nvs n h sck k. h phns nh dsks n h IGBE cs n F. Ludd bgn ngng….nd ngng…. nd ngng. hn, h phns h SCp’s Oc bgn ngng. Nvus nvss wnd knw wh hppd IGBE nd h gd.

Und h suspcns nvss, n nvsgn cncd,ndng IGBE b udun nps wh s nvsssng $140 n. h ws ny s un gd n hcpny’s vu nd s nvss s h ny. On  h bhs, wh pd h busnss, ws snncd ngpsn nd h h ws sbbd dh b hs .

h hs sy? Wh h pc gd nd nvsns sng, h cud sy b nh IGBE pnng sds und h cn. h, s gd vwhs pcuny ps b nvsng n pcus s.

ips o Avoid Precious Metals Fraud

B y pss h yu cn buy pcus s•

bw h cun k pc.

k pssssn yu•

pcus s b cn hy sd by

bnk, n yu n.Us s hd pyn pcus s s•

bnk d. Insuc yu bnk n s h unh bun s n yu hnds n yu s dps

D ny wh ppy cnsd, gud s h•

sbshd gd puns nd hsy hns d

B y hgh-pssu ss ccs.•

B buyng pcus s hugh h v h cnc h U.S. Cdy Fuus dng Cssn((www.cftc.gov), h Fd Dpn Fnnc S(www.fldfs.com) nd h Nn Fuus Asscn (ww futures.org ). hs gncs cn yu h busnss p

ppy cnsd nd hy hv bn dscpnd.

B xy cu whn dng wh busnsss nd cd usd h cuny. I yu dudd, w b xdcu g yu ny bck pscu h cns.

 About the Author 

  Mk Mthon Fnn Adntto o th BInvtgton, Fod O o Fnn Rguton (OFRgut th bnkng, nn nd ut ndut n Fod hdqutd n Th nd n b hd t [email protected].

Beware of Investment Scams in the Gold Marketby Mark Mathosian, Financial Administrator, Bureau of Investigations,

Florida Ofce of Financial Regulation

 www.amuonline.com or 877.777.9081

Learn more at

American Military University 

 Just a few of the courses available online from American Military University. To learn

more visit amuonline.com or stop by our table at the NW3C summit in Memphis.

 American Military University is part of the American Public University System and is open to everyone regardof military affiliation or background.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 14/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 814

O  nsunc ud s h uch

gs undcd. hs uds h dcd n g unpd. Msss pvd ndy pngquns by h nsunc ndusy.

Hwv, pssn gnznsn nd ny s pcng  

ud “dscvd” s cuy pd uhs.

h css sscd wh hh c ud

snc. h Nn Hhc Asscnhs sd nsunc ud n h hh cndusy n cn xcd $60 bn y, v $162

n dy. hs css pssd n dcy h cnsuhugh h pus w py wds u hhc pcs.Cnsus nd cnnuy h vcs b hd nddssng hs ssu.

h Nbsk Dpn Insunc, Insunc FudPvnn Dvsn (IFPD), cny cvd nn dc pvd. h dc pvd suspcd n py  dvng csh cn ccuns n h “nsunc c-pys” s w s “s-pys.” Shy b h nn, h

py busd h dc pvd h d un csh hy hd bn dvd h c. h pvdws supsd whn h py pd bck h sd ss  $8,500. h dc pvd hd xpcd ss ny whundd ds s.

h pvd hn bc w ddn cncns whnh c cvd n “Expnn Bns” ng wh chck n nsu sng n h py’s chdn s pn. h dc hd sn y bs b; hwv,hs c ws cnsdd “ng bn” pyn. h pvd’s knwdg, h nsu hs py hd nvbn bd by hs c. h dc cncd h nsu nd

busd h ns cvd. h dc pvd hncncd h IFPD gdng h , wnng nsu hsc ws n cpnc wh ndy png sus.S css hv gn unpd uhs.

h IFPD pnd n nvsgn bsd upn h nncvd. h nsu ws cncd gdng h ss nd qusws d ddn bng nn h y b psnn hs py’s pcy hugh h pvd. h ndngs w n g sups. Hwv, h ck cgnn h udndcs ws, cnsdng h nub ud ndcs psn.

h nvsgn vd ny $100,000 ws dvd h

nsu v 26-nh pd. h gd y svn hd

ncud 1,942 c vss wh h Dc Chpcc Mvgng h u c vss ch wk. hs nvshs bn wdd h cuny ny pscun.

Insunc pus w cnnu b pcd by hcss sscd wh hhc ud. Mndy pquns, ducn cpgns nd ggssv nvs h kys hvng n pc n nsunc ud.

Mdc pssns nd nsus cn us h wng-cch” ud ndcs, nd “Insunc Fud DHns” by h Nbsk Dpn Insunc, IFdn hh c ud s bng cd:

Ss ps vuns sv p•

Vgu dc ps nd/ cds, •

nn nd ncnssn nn.

Chng n unusu bng pn.•

Indcns d nucud dcun•

Ss n dcs ns gdng c v•

ns.

Sgns xcss n.•

Oh ndcs w dy cgnzd:

Svn pns h s y ng h•

s wk.

Unusu n by pvd (n pn w•

nhs d).

A y bs w bng bd h s •

pcdu ngy (CP) cds.

N ncb p-xsng cndns njus.•

“Bck bng” ny 10 nhs.•

“Hndwn” ns h pvd’s •

bus pn dcy du h c h p

bn s-pyng.q

 About the Author 

Ch St th Dvon Ch o th Nbk DptInun, IFPD. Th dvon ond opton n Sptb

to onont th pob o nun ud n Nbk. Po toth IFPD, Dvon Ch St w n nvtgto wth th T

Invtgton Unt o th Lnon Po Dptnt.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 15/57

 

h p : / / i . w 3 .

C

Inn C Cpn Cn (IC3) n Fn, WV.A nw vsn h S W Vus s bng spd hughsp -s n cnjuncn wh spcc hdys. Rcpns dcd cck n nk v n cnc gngcd (-cd) cnnd whn h -. Onc h us ccksn h nk, cus sw (w) s dwndd hInn-cnncd dvc cpu nd cuss bcn ncd p bn. Incd cpus cn b usd c dny h, unch dn svc cks, nd nsw whch gs h uss’ kysks.

h S W vus hs cpzd n vus Hdys n hs y by sndng ns -s dvsng n -cd nk 

whn h x h sp -.

In nh cn wv - nusns, h IC3 cvdnn vc wh hd h - ccun hjckdnd psswd chngd s h sh cud n ng ccss hccun. Onc cpsd, h hjck hn sn n - h ccun h n ddss bk cng h sh(h vc) ndd k puchs spcd Wb s,bu sd h h cd cd hd bn suspndd nd shws unb pcd wh h puchs. h - skd hcpns hy wud k h puchs h, ndcng shws n huy nd wud py n csh s sn s h cpnpd h. h ush hs puchs ws du spc

pn n p-dsgnd ps Wb ss bng d n wk ny $2.99. A h puchs, us n ndpsswd wud b sn ccss h dwnd pg. h -qusd us n nd psswd b wdd, ndcng hpuchs hd bn d.

Ahugh h pyn un qusd ws vy

ppuny h ndvdu’s cd cd ncpsd nd usd h udun puws g.

Ang h cn nds ncud Fk Pp-Up Ads Vus Sw. Upn vsng cn Wb ss, vcs pp-up ncn dvsng h pssb vuss cpus. h pp-up hn quss (usuy $49upgd/upd h n-vus sw. Onc ccpd, h

 vus sw h dd n uncn ppy ws n nu. Dwnd cns cud hv sud n vjns, nd kygg nsns n h vc’s cpu

h cpn’s cd cd cud s hv bn chgd

h un qud h sw. Rcpns dvsd cnc h cpny sv h ssu w unsucE-s wn unnswd nd cs h phn npvdd w dcd vc- bx.

hs s nds sgny h v-vvng ndscp cnusns, s wud-b hjcks cnnu nvn cv scn d gn ccss vcs’ chns, ccuns ndnn. Vcs skd vs www.3.gov c hy hv n hs ny h nusn-d sc

 About the Author 

 Aon Ntno n Intnt Fud Anyt wth 8 y xp

th Intnt C Copnt Cnt.

New Trendby Aaron Naternicola, Internet Fraud Analyst, N

F I .Scuy nds b u-yd s h nuus bscs w b n h wy h n•

Ensu scuy s nsd vy pssb ny pn.•

Idny chns cnncd h Inn nd ssss h dns h’s nggd.•

Dn yu svs uzng ny ps h n scu.•

Ensu yu uzng h s up--d pchs yu sw.•

R www.ic3.gov

ALERTSIN T E R N E T C R I M E CO M P L A I N T CE N T E R

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 16/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 816

S  , , nn v w ncn s w knw dy;

bu hs syss s gv s nw s by. Cn yub sud hck gs n yu nwk nd ccsss snsvs? Cn yu b sud kng pv nn vb dns nys? Cn yu b sud h nn n h syss u--d, unb, ncuds nnn shds?

Fs, h bvus nd usss nsw: cus yu cn. On hhks Acn scy s h yu cn py uch b sud by nyn nyhng. Evn h cs gs hwn u cu y n, ’s s ky k up gd d yu nd gn

g d ndss nxy. h ns h hs c cny ddss s whh yu’ ky b hd ccunb h vus pbs h ss ccu whn hsng, usng,nnng, yng n cn nn syss.

S ’s k h ss-bvus cs s. Is h ny pnby sscd wh hvng cp, ccu, uhu,w-uncnng dbs, cnnng nhng bu nnh ’s wd hv?

Ys, ununy, h s. Evn yu pu gh h bsdbs n h wd, yu’ s hv d wh pvcy ssus.Vus ws y ppy suns n whch sn bnsccss nn h hy n suppsd hv.

h nub wys h pvcy s pcd:

C,• h 14h Andn’s Du PcssCus hs n bn nvkd pc pvcy.

B ,• 42 U.S.C. § 1983 (Cv cn dpvn  ghs) cs cv by vns C nsunghs (.g., h Du Pcss Cus). As, 5 USC § 552(h Pvcy Ac - Rcds nnd n ndvdus) sss n wh gvnn gncs cn dscs. (In hns kng suc gn ppcn, hsc sn’ kng nyhng s-spcc. Evyhngn h shud ppy vyn quy, bu yu shudchck wh yu c pscu s h ddn s ws h gh s ppy yu.)

B ,• 28 C.F.R. P 23 (Cn IngncSyss Opng Pcs) ss s n wh ps cn ngnc syss cn dscs.

Fny,• , n h u vs h Invsn Pvcy s Pubc Dscsu Pv Fcs.h’s s pn d-shnd nggnc. O cus,svgn uny y pvd s pcn h.

Can you be held liable for violating The Constitution/42 U.S.C. § 1983?

Y. H, ’ . hs n gun s gny dvncd ny  shng gc hs hppnd ( nsnc, snhs ccssd pv nn nd usd ck dwn

 vc, s n 2008 cs wh dsgund x-bynd gndunuhzd ccss 911 nn nd usd ck dwn nd ud hs gnd’s nw bynd). A h pn, cn b gud h h gvnn’s cns (n sng hd) dpvd h vc , vng h Du Pcss Cus(Whch ds: “N S sh dpv ny psn , by,

ppy, whu du pcss w ...”). O cus, snc hDu Pcss Cus ncuds dpvn ppy s w s ,h’s n sn why cudn’ b nvkd n css dny h jus s sy. ( I’s jus h h csw s s hvy skwdwds nsncs ss .)

h Du Pcss Cus, gny, dsn’ c n vduy h s pc s czns h cs pvndvdus. Hwv, h w sndd xcpns hu. On s whn h s hs kn cusdy sn (nwhch cs, h c h h s s dnyng h h d c s hy s pc hsvs cs duy h s h snb pcn). h h s whn h scd ( nhncd) h dng n h s pc.

Wh h Sup Cu hs y cy dp hy  s-cd dng, ’s bn usd n h 2nd, 3d, 6 h, 7 h, 8 h, 9 h,10h, nd 11h ccus, nd D.C. Ech ccu nus s s s-cd dng dny, bu h 3d ccu’s s bh gd psnn nd y cn (2006).

pv n s-cd dng c n h hd Ccu, pn us pv h wng u ns:

h h uy cusd ws sb nd y dc;1.

s c cd wh dg cupby h shcks2.

h cnscnc;

nshp bwn h s nd h pn xs d such3.

h h pn ws sb vc h dndn’scs, b dsc css psns subjcd h pn h bugh bu by h s’s cns, sppsd b h pubc n gn; nd

s c vy usd hs h uhy n 4.

wy h cd dng h czn h nddh czn vunb dng hn hd h sn cd . Bgh v. Wsnd Cuny, 443 F.3d276, 281 (3d C. 2006) (nn qun ks ndns d)

h p : / / i

h hs pngs n vy gd nws n h cs  unuhzd ccss scuy bch. Dp ndng n jus wh s nn s bnd, h h y y n b sbnd y dc. In dy’s g dny h, hwv, dsn’k uch gnn sb nd y dc nk bwn h s snsv d nd n ID h vnskng ncdn. Sy, h psn whs nn wscpsd s cny sb vc h c (, n hcs g d bch, b dsc css psnssubjcd pn h). F h , hugh cng hcn nn sys n h s pc (nd, n h scndpc, by pcng h d n whv nn h ws pcd),

s c usd h uhy c h dng (, s, k h czn vunb hn hy hd n dn s).

Hp cs h scnd png. Bu wh s cupby h“shcks h cnscnc”? h’s hd pn dwn. I’s sndd wh gd pdg, s. h U.S. Sup Cu,n County o Snto v. Lw, 523 U.S. 833, 846 (U.S. 1998),hs sd h “ h cnuy nw w hv spkn hcgnzb v xcuv bus pw s h whch shcksh cnscnc.” Bu wh, xcy, hv hy n by h hps 50 ys? h’s hd sy.

h cus hv gny cknwdgd h h “shcks hcnscnc” s s sun. Bhv h’s undsndb n hgh-pssu sun s ss undsndb whn h psnhs db nd c n unhud judgn. In nxy ns nvnn, n cu nn cus h susuy qud. On h h nd h spcu, dbndnc hs bn cknwdgd b nugh whn hs c hs p hnk hngs hugh. S cushv vn suggsd h cu knwdg sk h sunncssy whn h sk s s bvus h shud b knwn.

S, wh ds h v us? h’s gd qusn, nd n hcn’ b nswd usd cu, I’ d. A w cn d hspn s k h css nd g gn sns h.Cnsd h cs nvvng h s 911 nn (Php

v. County o Aghny, 515 F.3d 224 (3d C. 2008))- sunwh h ud ws dd by hs cwks n h 911 ccn wh knw hs n s nd pud up h vncds h nywy. h cwks’ bhv ws cnsdd b pny s ndn h vc’s sy h cudshck h cnscnc. (h ssu n pp ws whh h

 vc’s y cud s c bsd n s-cd dnghy , n whh hy w gh).

On h h hnd, n cs (Ht v. Cty o Ltt Rok, 432 F.3d 801(8h C. 2005)) wh h ns, ddsss, sc scuy nubs,nd phn nubs w sng cs nd h ds w gvn dndn n dug ( h, hswy, wh pvdd h wh cps), h cy’s hun sucsdpn nd h py wh sd h nn w

cnsdd, s w, b guy (And nggnc s n nugh shck

h n dnc bwn h css, uPhp , h gvnn py knw h swh h gn sun nd suppd h (s hy knw h h cwk ws wsn’ suppsd b ccssng h s hh nw bynd), wh n H, h d n h wng hnds hdn’ ccud h ssud h vyhng ws un. h’s ch, bu h’s n c n. And, unun

gudnc y h dcy ddsss cpus s-cd dngs. Hwv, ks xy dnng c pn cpu b hn nggnc, s h s gs. A h dpn’s w hndng db ndnc bcs nc

C 5 USC A R )?

Y. H, n ub h (nd hn, ny ns nd

F, yu n py d gncy).

5 USC § 552 ny pps “gncs” h F s pupss, h ncuds “ny xcuv ddpn, Gvnn cpn, Gvcpn, h sbshn n h xGvnn (ncudng h Excuv Oc ny ndpndn guy gncy.” S, ddnd yu y skp hd.

In gn, psn wud hv wuy d v hs w. h s, hwv, cv bntn ny od onnng ny ndvduvn, tn, nd optn

 n n ny dtnton tng to th qught, o oppotunt o, o bnt to th ndd on th b o uh od, nd onqu d whh dv to th ndvdu.” 

Hwv, 5 USC § 552 ncuds w F xp, ws h hds gnus xpng cn syss cdsquns h su h cds gncy whch ps, s s pncp unpnng h ncn cn s h quns h hy cn’ g subscns (b) nd (). Subscn (b) ncus nd subscn () ncuds h cn

PART

ey CHRisTmn DESILETS , RESEARCH RTTOR nE

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 17/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 818

h hnd, hy cn gn xpn subscn (g), whchgvns cv pns, ncudng h n spd u n hpcdng pgph. O cus, hs y h xpnsh h gncy hds allowed  gn. I hs pc s vn yu, yu gh wn chck nd s yu gncy hd hsn c gnd hs xpns.

F hs wh cuus, h dscsu us d s ws:

(b) Condton o dou. No gny h do ny od whh ontnd n yt o od by ny n o ounton to

ny pon, o to noth gny, xpt puunt to wttn qut by, o wth th po wttn onnt o, th ndvdu to who thod ptn, un dou o th od woud b--

hs cs nd pys h gncy whch1.

nns h cd wh hv nd h cd nh pnc h dus;

qud und scn 552 hs [5 USCS § 552];2.

un us s dnd n subscn ()(7) hs scn3.

nd dscbd und subscn ()(4)(D) hs scn;

h Buu h Cnsus pupss pnnng4.

cyng u cnsus suvy d cvy pusun h pvsns 13;

cpn wh hs pvdd h gncy wh dvnc5.

dqu wn ssunc h h cd w b usd sy s ssc sch png cd, nd h cd s b nsd n h s n ndvduy dnb;

h Nn Achvs nd Rcds Adnsn s6.

cd whch hs sucn hsc h vu wn s cnnud psvn by h Und SsGvnn, vun by h Achvs hUnd Ss h dsgn h Achvs dnwhh h cd hs such vu;

nh gncy n nsuny ny 7.

gvnn jusdcn whn und h cn  h Und Ss cv cn w ncncvy h cvy s uhzd by w, nd h hd  h gncy nsuny hs d wn qus h gncy whch nns h cd spcyngh pcu pn dsd nd h w ncncvy whch h cd s sugh;

psn pusun shwng cpng8.

ccusncs cng h hh sy n ndvdu upn such dscsu ncn s nsd hs knwn ddss such ndvdu;

h Hus Cngss, , h xn 9.

whn s jusdcn, ny c subch, ny jn c Cngss subc ny such jn c;

h Cp Gn, ny hs uhzd10.

psnvs, n h cus h pnc hdus h Gn Accunng Oc [GvnnAccunby Oc];

pusun h d cu cpn jusdcn; 11.

cnsu png gncy n ccdnc wh12.

scn 3711() 31.

C 28 C.F.R. P 2? (“CIngnc Syss Opng Pcs” ppy, by gucn ngnc syss png und h OnbuCn nd S Ss Ac 1968. Hwv, g n syss h n qud dh h gu

 vuny dcdd dp s vsn .)

N . 28 C.F.R. P 23 ds n, bc h cv cn by. I’s py gun, ng gncs h p cn nsyss wh hy hv cpy wh g Fd u

Hwv… 28 C.F.R. P 23.20() ds “A pjc shsncns unuhzd ccss, uzn, dscnn cnnd n h sys.” Wh hs sncw vy, bu hy y ncud s s cv by. F, yu’ yng dnd yus n cv cs h hy by, h c h yu vd spcy s unky hp yu cs.

On h dnsv sd, 28 C.F.R. P 23.20(n) ds

“A ptptng gny o n ntjudton ntgnut ntn n t gny noton whh dounubon to th yt nd uppot opn wth pojt. Ptptng gny uppotng yt ub

ut b d vb o onb udt nd npton bypnttv. Pojt pnttv w ondut ptptngnpton nd udt n uh nn o to pott th ondnd ntvty o ptptng gny ntgn od.” 

S h’s s chnc h n gncy h dsn’ cnspcns nd uds n such wy s pc h cnd s cds y nd h Fd undng ( quvnhs pcu gun hs bn dpd nub cnxs) s cn ngnc sys n dng.

C D P F?

I , . h Pubc Dscsu Fcs ccus whn sn pubshs nn-nwswhy, cs h s n h h pubcn wud b snb psn. S, s wh, ’s hd s nn nn sys s “pubshng” h nn. Evnn s gvn sc s pp- sy, bw ncn cuny - ’s n cnsdd pubshngh nn s dssnd h pubc g (suchpdc). Dsbung nn csd s ndvh hn h gn pubc, ds n cnsu pubc

Hwv, n css ss dsbun nn, nd h qun nn-nwswhnss s pv

nn s g pubc cncn. h gh bwgg s whh pcu pc ng pubc cncn (.g., sxu pd’s ddss);Sup Cu hs hd h s y n punsh h pub wuy bnd uhu nn unss ncssy s ns h hghs d ( cpng ns). (S v. B.J.F., 491 U.S. 524, 1989) hs sn’ gun h hw k cn sd, bu ds nd k s juspubcn nn whn h pubcn ps scy. (hugh ’ b cs wh h cs cnncn nn sys cud b sn b pubshd.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 18/57

 

h p : / / i . w 3 .

C ?

C. (Unss yu s’s ws pc yu) Bng sud nggnc s wys pssby n suns wh ppxpnc ss. h’s jus n wy und . b b nggnc, s yu s hs w yu b hd b (n h ). Scndy, us b shwn h yu hd duy (gny, “duy c”), yu bchd h duy (gny, by n xcsng “snb c”), nd h bch duy sudn h dg n qusn. O cus, uch h w dpnd nyu xc sun. A dbs dns, xp, gh

hv duy k snb c pc h pvcy h dn hs h c - duy h b cp wud n ky hv.

hs, hwv, dsn’ n h cs dy b  hcks gn ccss dbss und h c. Ony snbpssn n h s d wud hv dn pvn, y n c b hd b nggnc. Yu dn’ nd cuy succd n pvnng ccss h d. Rsnbpcns y ncud dpng h s sndds usd by nsd bdy pssns n h d. A , spcdndusy gup cn gny b ssud cnss snbpssns. Fwng h cndns, hn, s shngh s vy sy dns h snb pssnn h d wud d. (hugh, cus, hngs chng whn yucqu nw nn, .g., knwdg pvus succssuunuhzd ccss ps usng pcu hds. hn yuhv sk yus hw hyphc, snb pssnwud hv spndd h nw nn.)

Wh gd h ndvdu by pc cs Ss n h bd cgs:

, .

Ss n hs cgy Ab, Ask, Hw, Idh,•

Indn, Iw, Knss, Knucky, Mn, Mnns,Mssu, Mnn, Nvd, Nw Jsy, Nw Mxc,Nh Cn, nnss, Vgn, Wshngn, WsVgn, Wscnsn, nd Wyng.

A   , ,, .

Ss n hs gup Azn, Aknss, Cd,•

Dw, Fd, Ins, Lusn, Mynd, NhDk, Oh, Okh, Pnnsyvn, Suh Cn,Uh, nd Vn.

A , [ ] [(L “ ”)].

Ss n hs gup Cnnccu, Msschuss,•

Msssspp, Nbsk, Nw Hpsh, Ogn, SuhDk nd xs.

(Lss ss Po O Lbty In Hgh-Spd Puut: A Study Rpot to Th Mhgn Lw Rvon Coon, o  Mhgn Lw Rvon Coon Thty-t Annu Rpot,1996  http://council.legislature.mi.gov/files/mlrc/1996/police.htm,vd Augus 12, 2008.)

W S I ?

M, ’ F S C. Svgn Iuhscy, h svgn’s pvg n b subjc suwn cus unss h wshs b. In Hn v. Loun, 11 (1890), h Sup Cu hd h h Evnh An-s h ss s pssss svgn uny h un bng sud n d cu whcnsn. In css, h Sup Cu hs snghnsvgn uny cnsdby.

Hwv, “cnsqunc [h] Cu’s cgnn cn svgny s h suc uny h ny Ss nd s h S pssss unsus uhzd by d w.” (Nothn Inun CopNw Yok v. Chth County, 547 U.S. 189 (2006)). hund uncps ck svgn uny, (  Jnk v. RCounty, 538 U.S. 456, 466 (2003)), nd cuns n gcnsdd hv svgn uny, vn whn hy “ ‘sc s pw.’” Lk County Ett, In. v. Tho RPnnng Agny, 440 U.S. 391, 401 (1979).

Fuh, “uny ds n xnd psn wh h s, bu [wh] cs uncnsuny, bcus h

s pwss uhz h psn c n vnCnsun.” Ahus, Tppng th Stt Cout RouVnd. L. Rv. 953, 973 (1991).

And, cus, h bss Svgn Iuny (s ppss) s h hy cn’ b sud whu h cnsn. hy hv gvn h cnsn (by su, xp), SIuny s n pcn.

I ss h n s css, nnng n ccu, cn nn sys sckd wh g, cnn (whch gh n wys b pssb) cs nxpsu cv cn by hn h pc cAbsn hndu (psuby) uncn c pny dng h w ncn pssn s ngwhch s hdy nw dng w ncn.

In nsn, w’ d wh h dngs pncc ssng d, s w s h qusns unuhd ccn nd nvsns pvcy hugh d c(s ppsd pubcn).q

 About the Author 

Christian Desilets is a research attorney or the NW3C. A memb

West Virginia State Bar, Christian graduated rom the Georgeto

Center in 2001. He did his undergraduate work at Mississippi St

versity (MSU), studying sociology, computer science and crimina

 At MSU, Christian was awarded Alpha Kappa Delta’s Sociology

 graduate o the Year award (1997). Christian’s areas o expertise

investigating the nexus between white collar crimes and the adv

technology. Prior experience with sofware and Web-based utility

the Internet and intellectual property issues provide invaluable in

our members requesting assistance with the investigation and pro

o high-tech and white collar crimes. Christian is a Contributin

  or the Inormant Magazine.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 19/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 820

S uccessf

 ul case 

s u m marie

fro m  N W3

C  Me m ber

s

Case Name: “The Dealership Fraud Ring”Author: Stephen Jenson, Commanding Officer,ID Theft Unit

Agency: Suffolk County Police Department, NY

Is nsuns n dny cs ds hvs

y nnyy, nd gvs nvsgs cus cncnwhn cs h pcns hgh chngy n hnvsgn. Bu, dny hvs s y n dn, wch cs s h py hd cpsng vcs,dns1 .. Wh n nvsg ssgnd n dny hcs y n b “ch” skd n cpu nscs, h sh s s h “pn n” n h nvsgn. hs cncpws nv vdn hn n n nvsgn cnducd by hSuk Cuny Pc Dpn’s Idny h Un, NY.

L Whhd ws sd n nvsgn h sdn Ocb 2004, sud n hs cnvcn n Ap 2, 2008, svn wk . H ws cnvcd n un cuns  Idny h, w cuns Gnd Lcny nd n cun  Sch Dud nd ws snncd psn 10 30 ys. h cs ws svd by n nvsgn h xpdgd dn nvsgv sks nd h pssnc hdcvs nvvd.

On Ocb 6, 2004, h Idny h Un cvd cpns

dny h v Suk Cuny sdns wh hdpuchsd ubs n Spb h y h BnHnd dshp n Pchgu, NY. A h vcs hd ngd u nncng hugh h dshp. Whn wks, hpsn d ws usd n ps puchs Lnd Rv

  vhcs ds css Lng Isnd. h dny hvsppd u nncng by phn hugh Chs AuFnnc. Accdng Chs nvsgs, nc h n wsppvd h suspcs dcd h nnc nsun x n vuch h Lnd Rv d wh puchshd bn ngd. h ss s h dshp nvphyscy wh h “buy” nd h puchs wud snd “psnv” pck up h vhc.

Dcv W Pk h Idny h Un, snvsgn h bvus pn cps, Bn HH nvwd ngn nd pys. h n pppcss ws xnd s w s h ns pcdu dcuns by cu h nnc nsun. DInc. ws cncd. hy pvd n-dnd s h uv ndusy h uzs h Innuv ds wh nnc nsuns nd h jpng gncs. A sch h g s us nwhn h d’s gnzn pssb d bch v ny suspcd cps. Pk ws hvng suh dshp, bu h vnu nvsgn ws gng w. h cs ws sng h up nd vns h dwud qu h d nn nvsgs.

Lnd Rv ds n Lng Isnd hd bn d h by h Idny h Un n h s dy h nvsh dvsy pd s dy. Whn svLnd Rv d n Shwn, Suk Cuny, NY, cD. Pk. A subjc hd pd puchs Rngd by phn nd vuch ws cvd by x.

h dy, h psnv h “buy” sn pck up d whn h ssn bc suspcus sspngsppwk nsunc. w chcks h dshpsubjc py gsn nd d s w cvPk s dcuny vdnc. Fuh nvsgn h chcks w p “s” chck s pvdd nchckng ccun pnd n nh dny h cgnd n Nw Yk Cy. w subjcs sd n hby h Nw Yk Cy Pc Dpn w nccNw Yk Cy h h pd puchs. hw subd h Suk Pc Dpn’s IdnScn b pcssd n ngpns nd cpsn hugh h Aud Fngpn Idn

Svc (A.F.I.S.). Pk’s pns nvw h subjcw pu n hd s nh vn qud hs nn.

A w dys , nh d n Msspqu, Nssu CNY, cncd h ID h Un p sn puchs Rng Rv, uzng s sch. ws b vy h Bkyn sdn’s psn nws usd bn h n nd h h vc hd pdny h. Dcvs hd sz h ppuny n h xpsng h dns h u udss. A suvpn ws dvpd nd dcv ws pcd n h d wk undcv s ssn. Ahugh cs ppd by h suspcs k pc n vus ps hh cn h Bn Hnd dshp ws cd

500 s h Suk Cuny bd, wng h nvs n whn h jusdcn h Suk CunyDpn, und Nw Yk S Lw.

Ov h cus h nx h dys, h undcvnggd n ngns h dvy Rng Rvh “buy” psng s h vc Bkyn. A “Chnhd bn cd by h cns vd dcn. h “cud ny b cncd by vng ssg n phn. hn dcvs wd h “buy” un Ov h h dys h sk-u, dcvs bsvppd b cun-suvnc pn bng sh h dshp jus b h “buy” un

h c d. h s cdd cns p nub

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 20/57

 

h p : / / i . w 3 .

  vhc dscpns pd by h cun suvnc. hcn pn s ncudd nd s psng sshpps n h shw. hy nd h busnss jus bh “buy” cd nd dpd dy h c wsnd. h cun suvnc nv dcd h pcsk-u. Invsgs w nw cnvncd hy w dngwh n gnzd cn nps.

On h hd dy h suvnc h dcvs cncuddh subjcs nvvd wud n k dvy h vhc ndxps hsvs. Ngns bwn h undcv cnd “buy” w sd s bc g c nd us.As s , ws dcdd h nzd s wudb qusd h puchs wng sn h hnh “buy” k dvy h c. Mnus b busnsscsng, subjc sppd n h dshp nd dppd hqusd s n dsk nd hn d b nyn cudbsv h. h dcun ws cvd nd subd hdpns Idncn Un pcssng nd xnn n ngpns. h ny sp n h dcun wsdscvd b udun nd h gsn nub dd n

xs. An vun h h pn d h Idny h Un n h suvnc.

h suspc h Shwn d, wh pssssd h bdchcks, ws dnd h n ngpns dscvdn h w chcks cvd h dshp. h ssn h d pckd h suspc ph y cnh dncn. On Dcb 8, 2004, Ky Cpnd 31Fwk Bkyn, NY, ws sd by D. Pk wh hsssnc h U.S. Msh’s sk Fc n Bkyn. Cpndws chgd wh Cn Pssssn Fgd Insun 2nd dg nd gd p bgn sv n nd hd hys nsd cpng n h nvsgn. Cpnd hd hsy sus ny ss ncudng s nccn

ny ud nd hd pny “s cd.” Hs cquscncn kng h p cncnd dcvs s h xn cnh cn gnzn hd v s bs. Cpndvnuy svd w nd hd ys b hs s.

In My 2005, D. hs Gb h Idny h Un wsnvsgng n ppny und cpn dny h Suk Cuny sdn. Sh pd sn hd usdh psn nn puchs $15,000.00 cyc nBkyn by ppyng n nn hugh E-Ln. Upnnvwng h vc, ws dscvd sv h ns ndsvcs w bnd nn hugh Cp On Fnncng,Inn Bnk nd GIECO nsunc. Gb bnd h

psn d d nn h ns nd svcs kn u nh n h vc. Cp On nvsgs hd nkd hsncdn wh s ny hs h hy dubbd h nps, h“Nw Yk Fud Rng.” On Jun 8, 2005 D. Gb ws ndby Nw Yk Cy Pc h L Whhd hd bn sdn pssssn h cyc gsd h vc. Dunghs s, Whhd pvdd h ddss ggd by E-Ln nh nn ppcn. h dcv ws n ng dng whshdws nw; h hd n nd c wk wh.

D. Gb cd nd nvwd nyn wh knw dwh Whhd, wh ppny ws png bk nh p usc scn. h dcv bgn ssbng h pp nvvng v $750,000.00 n n ppcns cnducdv h Inn wh sv nnc nsuns. A s  

  vcs ws dvpd hugh Cp On nd E-Lncudd v y-u vcs h Nw Yk sv suhsn ss. h ns w hgh-nd vsuch s Pchs nd Lnd Rvs, nd w s hns cd (HELOC). S h quy n ppsud n chcks ns husnds ds d ddsss n vus ps Bkyn. A nghy subpcss bgn bn ppcn ds, IP gs ndnubs cdd n h pcss. Phn nubs nd dvd n d h nnc nsuns, ws n usubjc subpns ssud h svc pvds

As h d ws ccd ws ndxd nd chd nyss. I ncudd husnds phn cs, IP ddsss, pddsss nd - ddsss. A bckgund nvsgWhhd vd ddn nn h ws s cwh d h nnc nsuns. Anyss h cd sd v cnncns pcng Whhd cn n b cn nps nvvd n sdny cs. Mny h ddsss pvdd n h Inn ppcns w n h s ss wh Whh

h sdd pvdd s sdncs n pubc nd ccds. S ddsss bngd y bs gnds. Phn nubs sd n h ppcncds w ckd dwn. Abu wny hs nubgsd Abp Vc Svcs MnhnYk. A subsqun nvsgn vd Whhd n

 vc bxs und h n Jn Wsn wh usng gnd’s ddss n Unnd, Nssu Cuny, Nw Y

h chs s vd cnssncy n h cn - ddsss s up by h suspc h nn ppcH usd h vcs u n n h ddss ..; johnjon@o. Wh hs hpd h suspc kp ck hndvs, s hpd h Idny h Un d h swd s n subpnng nd ckng h ppd wh h vcs nn. h IP gs s v h ppcns gnd n cn n Cvnnd nh n Pk Pc n Bkyn. I ws dscvd hIP ddss ws s n h ppcn’s cpu s “by h nnc nsuns. Accdng h ch ppxy wk h n ppcns w g-n IP ddss hd chngd, bu h dcd “ck” h s. I ws hzd h h h cpu hd phbn dscnncd pd, qung h cqusn IP ddss, h cpu s ws cuy vd. Dw ncnd bv h “w dvng”, ws scn. Wdvng s h c schng W-F w

nwks by psn n vng vhc usng such pp PDA. I s s usng d scnn, u d pcc DXng2.

h d h h suspc(s) y b nvvd n w pducd nh bsc s pvng wh cuy u

 vc’s nn bn h ns. Whhd pvCvnd Av. ddss s hs sdnc n pvus Augus 5, 2005, sch wns w bnd h CAv. nd Pk Pc sdncs whch w xcud by h Idny h Un wh h sssnc h Pc Dpns Cpu Cs Un. Bh cunscud wss us nsd.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 21/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 822

Wh nvwng h sdns n Cvnd Av., Gbdscvd h hy hd bn cqunncs Whhd unh ws ng u, nd h h nv sdd h. On sdnsnd cdngs h Abp Vc nnuncnsnd dnd Whhd’s vc n gh h vn cdngs.hy hd s wnssd Whhd n c pkd n n hsdnc wh png pp cpu bu hd n zd hh cud us h nn cnncn. h sdn’s cpus w

szd nd n nyss by h Cpu Cs Un dndh ws n vdnc nkng h cpus h sc.

h d nyss s vd vy pn nk h hpdun h cs Gb. h nk cnncd hs cs h

 vcs h nvsgn n Ocb 2004. h ss vcsdvpd by h nnc nsuns cnnd h ns  h Suk cuny vcs n h cs. Gb vwdh nvsgn nd -xnd h cs s whD. Pk. h Abp phn nubs w gvn s cncnubs n h n ppcns n h css. h nwspc vdnc Pk hd cvd ws h sus hxnn n pns n h nzd “s” bnd

h Msspqu d. An A.F.I.S. sch ny vd hngpns w hs L Whhd.

Whhd’s phn cds w bnd nd xnd csy nd ws und nuus phn cs w d nd cvd Bn Hnd n Pchgu. Ad wh hs nw nn,dcvs wn bck h Pchgu d wh h s cssbgn n Ocb 2004. A nnsv nvws ws vd nncng gup hy cd h “B-” hd bn bugh n nnc cs hs wh cud n quy h d nncngdung c s. h bs h gup w gvn ccss h wh cus nn ws kp. hy w suhzd ccss h dshps D ck ccun ndg-n. Dcvs cvd h ns h u bs h

“B-”. Whhd’s phn cds w cpd s  phn nubs bngng h nnc . I vd nb, , hd nuus phn cncs wh Whhd.In Dcb 2005 sh ws ngd by Gb nd cnssdsh hd bn dng Whhd nd s h psn nn h gn vcs wh sh wkd h Pchgu dshp.Sh pvdd h vcs psn nn Whhd, ngwh h psswd ccss h d’s ck ccun. Whhdhn hd h by ccss h cd buu’s d bss s ws h cus nn.

Dung h cus h nvsgn, Whhd hd puchsd h 92 Hwnd Av. n nck, Nw Jsy. A suvnc h

sdnc vd dy un Whhd. A k-dwn pnws sbshd wh h P Auhy Pc s Whhd nhs dy p n Nw Yk Cy v h Gg Wshngn Bdg.On Jnuy 25, 2006, dcvs h Idny h Un wh hsssnc P Auhy Pc Ocs sd Whhd h cssd h bdg Nw Jsy n Nw Yk Cy. Whhdws kn Suk Cuny c chgs ncdns nvvngSuk’s vcs. A sch wn ws bnd by h nck, NwJsy Pc Dpn, h Hwnd Av. sdnc whchsud n h cvy pp cpu s w s sn nn hndgun, bu p vs nd sk sk. h pp wsnscy xnd by h Suk Cuny Pc Dpn’sCpu Cs Un whch cvd vdnc ncudng d

h vdncd Whhd’s ccss Bn Hnd’s D ck 

ccun.

A sch wn ws xcud n h Lnd Rv Whhpng whn h ws sd, vng dcuns bpsn nn nub psns n h vcsuppd by Cp On s w s h vdnc uds n Nw Jsy. h Lnd Rv ws h subjc nvsgn by D. Gb wh qucky cgnzd h

h ws usd nnc h c. I ws n h Cp On  vcs wh sdd n nnss. h nn wsv dcv n h Nw Yk Cy Pc DpVhc h Un wh sd Whhd h psssssn vhc. Whhd ws cnvcd n h chg n Dcb 2007 nd ws snncd ss hn y n j

Wh knwdg h Inn nd cpu nscnvvd n hs nvsgn s pn n h dcvs. h nvsgs ssgnd h Suk CunyDpn’s Idny h Un, s n s gncs, h nvsgv sks, hnd by ys nng nd xpwkng dn, w-ch cn css. hy ppccs s hy wud ny cn nvsgn nd xpsd ch vunbs Whhd’s sch. hy cgnsgncnc sngy bngn vdny vu dcupyd nvw nd ngn chnqus, suvhds nd cs gnzn s dndd by h nvsY, dsp h ys xpnc, hy knw vydy h pssss n pn nd, n hw nnc nsnd h nduss d busnss, nd hw dny hvs h. hs bus vdn n h nn n whch ws nvsgd. Cpu nscs nd Inn undcvs nw nd xcng nd n gs h nn h dh “gush” w wys b h sv h cs.q

References

2006 Idntty Fud Suvy Rpot, Jnuy 2006 (C1.

Von) Pg 2. Fd td Coon. http://www

os/2007/11/SynovateFinalReportIDTheft2006.pdf 

Wkpd.2.

 About the Author 

Dttv Sgnt Stphn Jnn 29 y vtn o th SuokPo Dptnt nd h bn Condng O o th IdntUnt n t npton n 2004. H h 21 y o nvtgtv x  o gnnt n th Pnt Dttv’ Buu, CoputUnt nd Intn A’ Buu. H h ttndd nuou nvtnng pog nudng NW3C’ BDRA, ADRA nd WCAT o

Case Name: “The Wig LadyAuthor: Detective Brandon Megedoht

Agency: Montgomery Police Department, MD

B D 2005 N 2007, MCuny Pc, Fud Scn, h U.S. Sc Svc

M A Fud sk Fc (MAFF -Wshngn, DC) cnn nvsgn cncnng h, Idny h nd Bnknvvng 30 nnc nsuns nd v $300,000 n nvsgn bgn n Dcb 2005, whn h MnCuny Pc – Cn Invsgn Dvsn - Fud Sc cv cpns dn Fnnc Insuns

nd cd cd cpns) nd pv czns. hs c

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 22/57

 

h p : / / i . w 3 .

pd h h unds Fnnc Insun ccuns du n “Accun kv” sch by suspc psng s uccun hd. Ov h nx w nhs, n ds w dvpd dny h suspcs nd h css w suspndd.

Dung Fbuy nd Mch 2005, h c cvd nub ddn css nvvng h s hd pn. hss w nd dung n c und-bn b  

nvsgns. h d ps w pud nd h suspcws cnd s h s n ps. An nvsg wsssgnd w-up n knwn vns nd dn hw ddn vcs n dnd.

h n, nd hn w-up vw cds vds vns dng bck Spb 2005. h nvsgndnd h h u bnk ccun hd ny pdh h w pus. h h ws cnducd by dnns ncud dscn h “Pckpck” wh nsupks ss, “Pus snch” n sun n hs, nd h vhc. hs hs ccud n up

  jusdcns ncud Mynd, Dsc Cub (DC),

Vgn, nd Msschuss.I ws dnd h dy h h, h vc’scd cd(s) wud b usd puchs s ngng gs,g cds, sd vu cds, nd psn gds g scnVs. A , suspc wud hn n h vc’s bnk nd ps s h vc. h suspc wud uz h vc’su bnk / AM cd nd h vc’s u ph dncn, udun dncn cnnng h vc’s psnnn bu wh h suspc’s phgph. h suspcwud uz wgs, sc ’s nd hs n d ch h ppnc h u ccun hd nd vd dncn. h suspc wud hn dspy hs “p dny” dcuns bnk psnn nd gn ccss h bnk ccun. On, h

suspc wud csh chck bngng nh und vc h n d pp h c.

h nvsgn dnd h h s suspc wsphgphd by Vgn bnchs Wchv Bnk n Juy 2005. h nvsgn s dnd h bwn Spbnd Dcb 2005, 13 Bnk Ac nd Mcn Bnk bnchs w gd cbnd ss ppxy $50,000. A h , h bnks hd n dnd h ss. Anddn nvsgn vd h bwn Jnuy nd Mch2006, h unknwn suspcs w cnducng h s sch.h v nvsgn sd wh bnk s nd pcquss nn ccud.

In Mch 2006, h gn suspc s gn nd nSunus Bnk suvnc phgphs. By Ap, Bnk  Ac, Sunus Bnk, Sndy Spng Bnk, Mcn Bnk nd Wchv Bnk p h h suspc ws dnd 14 dn bnchs dung h nhs Nvb ndDcb, 2005 cbnd ss ppxy $39,000.h dnd ss bud nd unknwn suspcscnducng h sch ws jus und $100,000.

In My 2006, h nvsgns w psnd h U. S. ScSvc Fud sk Fc. An gn ws ssgnd cnduc jnnvsgn wh h Mngy Cuny Dpn Pc.

h nvsgs chd bnk phs, bnk nd pc nd cps chcks cnnc w n n dn ny nks nd pns bwn h vcs np dny pns dny cps.

By uzng bnk suvnc phgphs bnnuus ds gh dn bnks wh bcd n Mngy Cuny, Pnc Gg’s Cuny

Aund Cuny, Hwd Cuny, B Cuny, Mh Dsc Cub nd Axnd Cuny, Vgnnvsgs c bv h h s ndvdu(scnducng h bnk ccun k-v sch. h pn ppd b h wud n up bnks n h s d, ppch h dny hs s h ccun wn nd cp n nscns, bnng unds. I ws nd h phh h suspc n w h s wg, sc hpsng s h u ccun hd dn bnk bnc nub suvnc phgphs, ws bsvdbby h bnk. Dung h vns, h dd n cndbnk nscns. As dung h dn vns, bh h

nd w nd s kng n cu phns h nd ws snb ssu h h suspcs bn cdnng h cns by h us h cu p

Spdshs w dvpd whch vd h 14 s  vcs w cd nvvng gh dn bnks n  jusdcns wh $139,800 n sss. Bnk suvnc phw h ny c nks dnd bwn h vcs. hnd-dwn dg chs w cd pvd psnn h nvsgn wh nw cpnsw pd by h bnks nd vcs. h spdshxpndd ncud dn vbs such s spcc

 jusdcns, dys h wk, vcs nd h cs p ck nd pdc uu vns. By Juy 2006, ppchd $219,500 wh w ddn bnks gd.

Dung h cus h nvsgn, “ g” ndnd bwn h h vc pd h n h h nvsgs w d w h v

 vc’s dny nd chcks y n hv bn cp dys, wks vn nhs h h. Whn hbc w h dny h, us cd cds chcks, h vc wud p h h nsun whch wud hn cnduc s wn nn nvsb png h ss h pc. As su, h nvsbnd nnc nsun ss ps n h suspcs bn ppy unds uzng h

dny, cd cds nd chcks h ccun hds.

h dgs w xpndd nd pcd n cpu pwhch sud n h nkng pvusy und vc

  vus suspcs uzng sn chcks nd sn d p h h sch n up jusdcns. hpvdd uh cnn cvy bwn unknwn suspcs cng n cnc, nd nsud h cnd dcunn vdnc . h nvsgn sd wh n nw nvsgv ds. On Juy 23

h nvsgn ws sd h d sung n hdn n h Wshngn Ps nd hn uh nws n c nd nn nws us sung n v w dz und h cuny ng wh ddn vcs

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 23/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 824

h ss. w h ps w dnd cdb nd   vu h nvsgn. h h nw vcs s bccn h nvsgn.

On Juy 25h, 2006, Dcv wh h Mpn PcDpn (Wshngn, D.C.) cncd h nvsgs ndpvdd h ns C Sv nd Chs B. Bh hdbn sppd bnk n D.C. wh nggd n n ccun k-v sch n Mch 2006. C Sv ws sd h wh Chs B ws sd.

h nvsgs bnd h s p nd phgphs  bh Sv nd B nd w b psvy nk h snCpss Bnk chcks ngd n Wshngn, D.C. wh hs chcks ngd n h s d n Mngy Cuny, Mynd. h unknwn suspc dpcd n hbnk scuy phgphs ws psvy dnd s C Sv.A ws s nvvd wh sbd Chs B.

Invsgs bgn nvsg h hsy bh suspcs,ncudng quss nn h pc gncs ndv cns nd cn hsy nd h cqusn FBI FngPn Cds, s phs nd d nn. Cpns bnks cnnud un nd w ddd h nvsgn whsss v $300,000. Appxy 30 Fnnc Insuns w

dnd nvvng ppxy 80 vcs.

On Juy 27h, 2006, h nvsgs cvd n s p ndphgph h wn Shwsbuy Pc Dpn,Shwsbuy, MA, whch shwd h n Ap 31s, 2006 ChsB ws und b h p 2001 Cdc Dvbng MA gsn p 43LV51. On h d, B wssd nd chgd wh pssssn cnd dngussubsncs, hs bng ccn nd hn. H ws s sdn n pn s wn Suh Bsn bng cnnd nus h.

On Juy 28h, 2006, h nvsgs cvd cpy n pnBnch Wn (2001) nd n s phgph h ChsCuny, MD, Oc h Sh, whch shwd h Chs Bws sd s wnd suspc u pp chgs  h Und $300 nd Cnspcy C h Und $300.

On bu Juy 31s, 2006, h nvsgs cvd nd vwdnvsgv p dcunn h U.S. Sc Svc(USSS), Pvdnc, Rhd Isnd c, cncnng p snd subsqun nvsgn B bnk ud. On Ap3d, 1998, Es Pvdnc Pc nd h USSS spndd FBnk n p png bn unds wh udun dncn cd nd sn cd cd. h d h bnk nd g n vhc dvn by dnds Chs B. B d sp h pc cs whch

d vhc pusu. hy w subsquny und, sdnd chgd. Dung h nvsgn, ws dnd h h uzd udun Okh dv’s cns nd vdcd cd F Bnk cus. h cus hd pdh h h w n Ap 3d, 1998.

Invsgs cvd cds nd dv’s cns phgph Chs B h Cnwh Msschuss Rgsy  M Vhcs. h cds sd h dv’s cns ddss s13 Ms S, #3, Wcs, Msschuss. Oh dcunnshwd h B ws h wn 2001 Cdc Dv bngMA gsn p 43LV51 gsd h ddss. h vc’sSun us Bnk (MBNA) Cd/Db Cd ws chngd h

ddss 13 Ms S, Wcs, Msschuss.

h nvsgn uh vd h n undnd nd w dn Mynd Bnchs Sunus Bdnd hs s “SB.” Dung h nsung nscndvdu cshd w dn chcks gns “SB’s” ccws dnd h h ccun hds hs ww s vcs h. Bsd n h ccun k-v, SuBnk sud ss $5,100.

Oh h vcs ncudd “MV”, wh pd snn Mngy Cuny, MD. Ony w dys , n ndpsng s “MV” ccssd h Bnk Ac ccun

sp bnchs whdwng v $12,000. Wh cndh bckgund chcks, ws dnd h bh Cnd Chs B w h Bsn, MsschusFuh bckgund nvsgn n B vd ccpc, B’s w, Jcqun Jns-B, whss nd sn psn nn, ncudng hs nd “MV”, bn unds.

In Juy 2006, USSS pvdd nn h Jns-B ch ddss cn n Cp Hghs, Pnc GCuny, Mynd, n d cv Sc Scuy bh USSSA dvd bn chcks h ddss n AugSpb 2006. Usng B’s cns p, nvsgb ck h dwn hs w’s h.

In Ocb 2006, h nvsgs xcud Fd Wn h dnd cn n Pnc Ggs CMynd. In h hus w nuus cd cds ndpsn nn. Jns-B, s cng h vc “MV”, ws pcd n cusdy, nd n s wws bnd vns ID h, h nd FInvsgs subsquny bnd Fd Chgs Ih nd Bnk Fud. In Augus 2007, Jcqun Jnpd guy n Fd Cu – Gnb vus chgcvd snnc 61 nhs.

In Nvb 2006, C Sv’s sdnc ws pcd

suvnc by Bsn Pc Dpn Dcvs. Ssubsquny cd nd pcd und s n h pMngy Cuny Chgs nd Fd Chgs Idnnd Bnk Fud. Sh ws subsquny nspd MyAugus 2007, C Sv pd guy n Fd Cu – G vus chgs nd cvd 34 nhs. Invsgs cnh sch Chs B. In Nvb 2007, sd by h Nw Yk Cy Pc Dpn (NYwh nggd n bnk ccun k-v sch, usngpsn nn. FBI ngpns dnd hs Chs B. Chs B s cuny n h cusNYCPD pndng chgs n h jusdcn p psn Mngy Cuny, Mynd nd h jusdcnssuspcs cnncd h bnk ccun k-v schbn dscvd nd h css cuny ngng.

As su h spcc “Wg Ldy” nvsgns, 34 MnCuny ps w csd wh ny ss ( h nsuns nvvd), v $300,000. hs ss s n U.S. Cubnd by h suspc(s) nnc nsuns nn k n ccun h us ngn sn cdbnd ch czn vc n h psn ppcuncy bnd h h cu h.q

Submit your Case Highlights to be published inInormant. Send your case summaries to Loreal

at [email protected] .

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 24/57

 

h p : / / i . w 3 .

W 67,000, BCuny  s n spwng ps. h Bdd Cuny 

Sh ’s Oc (BCSO) s vy s gncy wh jus und80 pys, bu s uncns s w “bg cy” pcdpn. I bss n pssv und p dvsn, db nccs suppssn un nd dsngushd InnCs Agns Chdn (ICAC) sk Fc, h bngs BddCuny n h bg gus w ncn.

M Sh Mk Bwn, h n h cn h whpn. Hs s s ncus nd hs cuny by ch sundnb. Whn skd hw h g sd n w ncn,Bwn nd bck n hs ch nd gncd h cng, s  chng bck h pcs n whn nspn nddsny cdd. “I guss ws h Ry Rgs nd GnAuy vs I sw gwng up n h 40’s nd 50’s.” A n w ncn, ncudng 20 ys Buu  Ach, bcc nd Fs, Bwn dcdd ws , bu wsn’ ng b ng nd ppuny cbnd push h n n ny nw dcn. Encugd by ccvc ds, Bwn dcdd gv pcs y nd n 1996, h

n nd ws cd Sh.

In h ys h hv wd, h Bdd Cuny Sh ’hs gd s d cv c-ghng h scs und h cuny sv u. Sh Bpspcv n c-ghng hsn’ bn ud by xpn. Wh hs cncp gd guy vs. bd guy y b nn h bck nd wh V gs h nnd h s Bwn hs vvd n dn-dy Rnssnc n. H bckby nd pp whv h gs. I dcds xp

hv ugh h nyhng, ’s h h wnds chng bwng nd ny s pu dwn s n h ph huc

Whn cs ghng c dy, Bwn nsss h hs b n h chngy n. “h pd, w hvs wys n h cung dg chngy. Lw ncgn, s pyng cch-up! Yu jus g sy hd h yu’ gng b bhnd!”

Bwn hs pun bng pgssv. Hs cnd-cn cn s s--h- cy nd hs dpuhv h s n hgh-ch qupn - h yp hngdpns nd bu cn’ d. S, hw ds Sh B? In 2006, h BCSO cvd v $300,000 n s ndgns. Anh $50,000 ws wdd hugh 3-y ChOnd Rgsn nd ckng (C-SOR) gn, nd jy, h BCSO ws wdd nh $750,000 n gn nycdn h Suhn Vgn Inn Cs Agns Csk c ( SOVA ICAC ). BCSO’s ggssv ps scuny hs pd , wng hs s gncy d bg hn

o Catch a Predator

Whn yu s h,h h bs hSOVA-ICAC sk c sk gu guys, h knd

yu gh n chuchn Sundy vn hc pub h ngh b.Ask h wh hy d vng nd pcncpnsg u h wndw.

L. Mk Hny, Sg.Rdny hpsn ndnvsg y Wghspnd h dys ngh dk csss h Inn n sch pds. B ch , sc nwkng s n nn gng

hy knw jus wh k. Ebdd n h shBdod County’ Sh Mk Bown

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 25/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 826

pch h ds ‘ chd’s nncnc cn nv b pcd.’ Evnh s vs wdshs wud b hd-pssd cnjuup ppp sn pups.

Ls y, h SOVA-ICAC un d 52 ss. In c, hpun ughnss s s gndy n h Inn.Dung n nn ncun n whch h ws pndng b 13-y d g, Invsg Wgh sys suspcd pdc gh u nd skd h ws wh h Bdd Cuny Sh ’s c. Wgh d gn gnnc, bu h suspc

ppny sd p nd subsquny dsppd nh vs pnss cybspc. Ms suspcs gd by hun n’ s un. h vwhng jy ushd h vu s nd n h gh wh hy’ uy hndcud, ndzd nd sppd h nnyy.

As yu gh gn, h ICAC un’s csd s nhng

sh sggng. L. Hny ss h v 500nvsgns y h SOVA-ICAC nd s d gncs.Wh such g csd, h’s n such hng s “ypc” dy n h jb. Ss, cn k hus bn nd xcu sch wn nd vn ng bnng s wns. A spn, s psvn hv b sn u, subpns hv b ssud nd wnsss nvwd. “Ss whn hsy hs h d,” sys Hny, “h vcs h cwd h w nv knw nd h ss wh nw cs.”

Wh ch s s bg dw pds, Sg. hpsnsys h’s bn sh wd Sc Nwkng ss bcusunk chs, hs ss hv nsn ssgng bu-n. hy s k s pds c wud-b vcsggphcy nd dny h hugh pcus nd phbus. “Cpd h chs,” h sys, “yu wud hv w -s... pcus b xchngd. Nw yu hv hpcus nsnnusy.”

I y b supsng n, bu ICAC sk cs d n u pusu nn pds. Insd, Sg. hpsn sys, nvsgswk “pcv css h nd n n undcv cpcy.”hy s nvsg wh h cd cv css- cpns  chd xpn h c hd ps. hpsn ddsh sch pds sn’ d by ggphc bundshugh h ds hy k cn up h wn bckyd s.

Knwng yu’v hpd k scy s by kng n bd guy u ccun cn b ncdby ssyng, bu hs

  jb cn s b ny xng. L. Hny suggd gh bck s wh cng n s h hngs h’s sndung hs 15 ys wh h c. h gs chdn wh’vbn sxuy buzd, n s css by h wn pns,w ppny dcu cnvy.

Perception is “Virtuality”

Accdng Sg. hpsn, j pb dy s “kdscn x n nh whu y v kng n nh.

Cuncn s vu…’s shhnd!” L. Hny 

gs. “Kds dng su hy wudn’ hv dn bhy’ vczng hsvs n h pcss. W hv yuwh sndng nud pcus hsvs wh h ch bynds nd hn h bynds sndng hs p h guys. hs s pducn, pssssn nd dsbuchd pngphy!”

And h’s bn n ncs n h nub chdn ccs gns ch h. Invsg Wgh ds hwkng cpns cyb-buyng nw hn n h hs s du h v-ncsng ppuy nd nub nwkng ss. S hs (ss) vn p cyb-bby ncugng ‘ggng cns’ h wn h s.”

Wh h un spnds nvsgng nd pphndvdus wh xp chdn, ’s s chgd wh dchdn nd pns bu h dngs h Inn nd sgud hsvs Inn cs. “I hnk vywhh PA, PF, PO, cvc gup, sch gup, hsscn, whv...shud k h b nvvd chdn dng n h Inn,” sys L. Hny.

Wh ds k s gd kd nwdys? cuncn,” sys nvsg Wgh. “M pn

h cpu nd h Inn bbys h chdn sugg k nds . h Inn hs bc h g sns h ps.” As pcv sw hyu chdn s nd h bd guys by, Hny sys “…bu . N sw xss dy h s y kd s.”

he Birthplace of the Safe Surfin’ Founda

In wn wh h ccn s dcddy suhn, Rbn Suns nvy. Evn hugh sh’s vd n Vgn yund nd xcuv dc h S Sun’ Funsunds s sh jus sppd h xpss n BSh’s pud h Nw Engnd s, bu sh knws h

ks h b n ddy ny Vgnns.

In h svn ys snc s ncpn, Sundqus sys h SFundn hs njyd ndus succss nd h uh uu s quy ncugng. “I’s gng b vnsuccssu bcus w’ cndn vy pubc sch syh cuny s gng k Inn Sy csss nd

d, Vgn s h ny s wh such csss h pubc sch cucuu. “I k us wh ndy n Vgn bu nw w hv n d h snd b kn,” Sundqus sd. “W’ usng Vgnd…hs s hw w dd n Vgn, hs s hw yu

n yu s.” Sundqus s Inn Sy csss b ndy bcus h pb, “jus sn’ gng nyN hw ny sy V shws yu s bu hsgng pppd dng hs knd hng, h nubn’ cng dwn.”

In nush, h S Sun’ Fundn ducs h pubInn cs nvvng chdn hugh s ncv Wspc vns, s nd h ducn ppunFundn- nn-p gnzn- hs cud s cbs hp g s ssg u. Ac Ek Esd; nd css Chy Ind nd pssn b py Jk jus s whs ns nd cs uny pp n ps

pubc svc nnuncns n supp h Fundn.

“C 21 .”

S. R T, ICAC

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 26/57

 

h p : / / i . w 3 .

Sundqus’s g s hv h S Sun’ Inn Sy Pgpnd by vy sch sys n h cuny. Bu, n hss hgh pcs nd shng sucs, Sundqus knwssh’s cng n uph b. h sk gng vy s bc h d Inn sy csss n sch s dcu,bu Sundqus uss qu nd dsn’ hs py h dv’sdvc gn vg. F nsnc, ‘In Vgn, hy hv hsndds nng SOL’s. hy wud sy hy dn’ hv ( cnsd Inn sy csss) bcus hy hv ch h SOL’s. I wud cun by syng w dn’ wn kwy yu SOL’s bu yu dn’ wn yu kds b swpdup by Inn pds, d yu?”

I’s h knd gc Sundqus nds spcy usu whn

pchng h undn gss undng, skng h…“Dn’ yu wn kp Vgn’s kds s?” Hw cn hy pssby sy n?q

 About the Author 

Craig joined the NW3C amily in October 2007. A seasoned news vet-

eran with over 25 years broadcasting experience, he has covered over 

500 criminal and civil court cases and reported on hundreds more major 

events throughout his career, receiving three individual awards rom the

 Associated Press or outstanding news coverage. Craig is a native o Cen-

tral Virginia.

H d shng bu . Fundng ppuns v

supp w ncn gncs. Us hs ps nd ppy vus gns supp yu gncy’s ss

W :

Fnd u whch gnzns gv gns n yu •

Cc sps succssu gn ppcns •

nc.

G knw h ndvdus wh wk w•

gnzn whch yu’ ppyng gn u

Subscb pub gn nwss nd•

sucs nn n gn ny. hs swy n bu gn ppuns.

Kp n gnzd s ppcb gns, pp•

quns nd ddns. Sy gnzd nd yu pvus gn ppcns.

Dn’ jus cus n gvnn gns. Mny •

cpns nd gnzns gn sssnpnshps.

Whn subng ppcns gn wds, •

ncud dd nn bu yu gnh ppsd usg gn unds.

A ’ :

Dn’ g d dcunn h c•

. Fw h gn’s us h ‘’, s bknus y su n h ss yu gn.

Whn spndng yu gn ny, b su •

vy pnny. B vy sc n hw yu spny nd wh yu spnd n. hs w sn hndy, s s gn wds qu gn b subd h gn. hs us d hgn unds w cd.

Vs hs ss n bu gn wng nd sucs:

http://www.grants.go•

vhttp://lone-eagles.com/mira2.ht • m

http://www.policeone.com/grant • s

http://www.chiefsupply.com/grants/opengrants.a•

References

http://lone-eagles.com/granthelp.ht 1. m

www.njlawman.com/Grants.htm2.

Robn Sundqut, Exutv Dto, S Sun’ Foundton

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 27/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 828

Do you ever feel ‘cyber-challenged’? Everyone 

cn d h p ghcybcs, bu ss’s hd undsnd wh

yu’ up gns whn cyb jgnss k gn ngug. h wng

s cny usd n h dscussn cyb nscs. Ushs s pss yu cyb budds.

j1. - A dsucv pg h squds s bngn ppcn. Unk vuss, jn hss d npc hsvs bu hy cn b jus s dsucv.On h s nsdus yps jn hs s pg h cs d yu cpu vuss bunsd nducs vuss n yu cpu.

B2. - A bn s yp b unnng n n IRCnwk h hs bn cd wh jn

K3. - A kygg s yp suvnc sw(cnsdd b h sw spyw) h hs hcpby cd vy kysk yu k g ,usuy ncypd.

M4. - Sh cus sw, sw dsgndspccy dg dsup sys, such s vus jn hs

I5. - h wd’s gs nucu cpuchps. Ahugh hs bn chngd n cn ysby nwcs AMD nd Cyx, In s dns hk PC cpcsss. Ny PCs bsdn In’s x86 chcu.

NFS6. - Sh N F Sys, n h sys h Wndws N png sys (Wndws Ns supps h FA sys). NFS hs us pv by, such s nscn gs hp cv dsk us.

MAC 7. - Sh Md Accss Cn ddss, hdw ddss h unquy dns ch nd   nwk.

‘H’8. - h pcss by whch w dvcs ncuncns. Hndshkng bgns whn n dvcsnds ssg nh dvc ndcng h wns sbsh cuncns chnn.

IP 9. - An dn cpu dvc n CP/IP nwk. Nwks usng h CP/IP pcu ssgs bsd n h IP ddss h dsnn.

ISP S10. - Sh Inn Sv c Pvd, cpny h pvds ccss h Inn

D11. - Sh dsbun, ds s usd dscb spcc dsbun Lnux h s bu

h cn Lnux png sys nd ncudsddn ppcns. Rd H, Dbn nd SuS xps ds.

V H12. - A sw pg h s dsgnd pp b uncnng nwk bu s cuy  dcy bu spccy b pbd nd ckd by cus uss. In cns hnyp, whch sypcy hdw dvc h us uss n s p,

 vu hnyp uss sw u nwk.

V13. - In cpung, vuzn ns c vu vsn dvc suc, such s sv, sg dvc, nwk vn n pngsys wh h wk dvds h suc n n xcun nvnns.

R 14. - In Innwkng, h pcss vng pck d suc dsnn. Rung s usuy pd by ddcd dvc cd u. Rung s ky u h Inn bcus nbs ssgs pss n cpu nh nd vnuy chh g chn.

S H15. - A ung chnqu h nsh chnc ung sch cng ung ps,cvy kng ung cn.

NG N (NGN)16. - h gvn dscb cuncns pck-bsd nwk hhnds up yps c (such s vc, d, ndud). I s h cnvgnc svc pvdnwks h ncuds h pubc swchd phnnwk (PSN), h d nwk (h Inn), nd, ns nsncs, h wss nwk s w.

B S17. - A s n whch ssg h hsbn bdcs css nwk sus n vn spnss, nd ch spns sus n s spnssn snwb c. A sv bdcs s cn bck  h nwk c, sung n nwk dwn.

h p : / / i

Bdcs ss cn usuy b pvnd by cuy cngung nwk bck g bdcs ssgs.

D M 18. - h c cpyng d ncn sg dvc n . Bcus hd s cpd n , h nn sd h gn cn s wys n xc cpy h d h pducn dvc. D ng s usu nh spdy cvy cc d dss. D

ng cn b pnd cy s cpy dn cn.

P K 19. - A hd sbshng cnncn scud nwk cpu whn nwk hds n hv n pn p. A dvc snds ss ss cnncn ps, n h pcks, h cpu’s csd ps, nd h ps sny gnd bu ggd by h w. Whn h dvc hs sbshd h pdnd squnc pcnncn ps, dn ggs p pn,nd h nwk cnncn s sbshd.

Z 20. - h pcss cng sucs n SAN d bnc h dvcs cnncd h nwk.Znng ws h nwk dns sp hSAN n uns nd c sg hs uns bsdn nd. Znng pcs h SAN sys suchhs s vuss, d cupn nd cus hckss h dvcs n h spcv zns n b cunc usd h zn hugh h ps unssgvn pssn.

SF21. - h SFud s usd dscb yp spyw h cks uss n puchsng knspyw nd nvus pgs.

A R22. - h pcss ccngnn bu n nndd g cus hck by pbng h g sys.

SMDS23. - Sh Swchd Mugb D Svcs, hgh-spd swchd d cuncns svcd by phn cpns h nb gnzns cnnc ggphcy sp c- nwks(LANs) n sng wd- nwk (WAN).

B 24. - Bubuggng ws skd ndvdus ccss h b phn cnds usng Buhwss chngy whu nyng ng hphn’s us. hs vunby ws h hck n

phn cs, snd nd d SMS, d cncs, vsdp n phn cnvs h Inn.

E25. FS - Sh Encypng F SMcs NFS sys. EFS s ky ncypn chngy h wks NFS pssns gn nd dny nd ds n Wndws N (xcud

XP (xcudng XP H Edn) p

S K26. - A psn, ny schngcy sphscd, wh spcc wknss v h Inn nccss sys whu y unds/h s xpng bcus h wknssn s.

SJ 27. - usd dscb hjckng n nggd Wb sssn whncpng nd usng h cdnus/vc h spcc sv.

W 28. - h c dvng unpp cpu, n nnn, nd n 8dp xp xsng wss n

H29. - Fd by cb“cvs,” hckvs s h c hc cpu sys n d c scy vd ssg. Unkwh y dsup sys nncds cus h, h hckvs knds dsupv cns (such s D dw nn cus.

SMS 30. - A cpund ‘phshng’ (SMS phshng) s yp phshng phn uss cv x ssgs chypnk, whch, cckd wud dhs h b phn.q

Ref 

 

erence

www.webopedia.com1.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 28/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 830

Instructor Spotlight

Phillip Parrott

ProfileSpecialty – Economic Crime

Class Taught – Financial Investigation Practical Skil

(FIPS)

C C F, LP

“Boy, has it been 12 years? Wow, how time flies.” I began my sscn wh h NW3C by psnng n h s

Ecnc C Sus, h ws n My 1996 n Pvdnc, RI. Is hv h PwPn psnn swh. I “pd” w h Sus v h ys, h s n n 2003.

In 1997, I pcpd wh gup dvpng h s Wh CC suvy. h gup cnssd hghy-qud pp n hndusy, psss k Jy Abns, NW3C guus nd . I nvcnssd nyn h I ws h dc ps nd suvys y cg gvnn. I ndd n scnd. I wn sch ndsw y u sz pcu n h n pg h sch nwsppwh n unng hdn. Pp w kng , kng h pp, kng . I und und nd wn h h dy.h nx dy, I wn sch nd – dng – s hng. I ss s y “cgus” s bunch pps h bns n ps h sy. h jun nwspps bgs dcdd punsh by unnng h wh hng gn. Pp w kng , kng h pp . . . Anywy, NW3C d d u bckgund n ,

s I g n h suvy pn. I ws c xpnc. Bng n “nh nchs” pscu, I y g chnc c n h “wh,wh, whn nd why” cnc c. I ws g xpnc.And n scnd!

h Cn s gd hngs. Bu, , s bunng nd sssnc – gd, hnds n, pccnng nd sssnc. h Cn ws h s n y S hnds-n, pcc nng szngcpus nd undsndng cpu schs ndvdnc. I ws gus pscu cu/sssn s hs y csss. I ncugd y nvsgs nd dpus nd. h Cncsss ugh us n b d cpunscs, nd w nv kd bck.

I ws n h pn h hpd dvp hIdny h css. I ws pssd by h Cn’s ds c vy pcc cus. Hvng dnd pscud bu 600dny h css, I knwnvsgs nd pscuscng u h cuscud cvy hnd nID h cs. I s ppn h nng vd n h

cus s n ID h. Whn

I ch h FIPS css I nvby g h qusn “n’ ywck guy n vd n h ID h cus?” I dny , cuus dsyng h cndnc gh wy!

I sd chng h FIPS cus bu 18 nhs g. I s wxcs n dvpng n cnc c cs nk

bn vy pssd by h nnsy h nds bng hI s njy h cvy. I hv sn cn nvsgn dvp sd cnc c nvsgn chnqus, nd  vns (ncudng ) gn c pspcv n wh wwh dsn’. I hv bn wkng wh Rck Byd, n NW3C Insuc, nd hs n h n p h cus – cu xpnc nd, s , I k h sus. S, s h “ngg bd nd b n h udun pusus, I hnd wh NW3C n dvpng n y s, cpb nd wnvsgs nd pscus hw h.

Career Outside of NW3C

I c cnc c pscun swh n y c

ys I ws wy n pv pcc wh g, hn buqbck g w . I pccd gn busnss w -- bnkng, nnc nd bnkupcy wk, sy nds nd pvs. In 1994 I jnd h Dnv Dsc Any (nw Gv

R’s Oc s h Ch wh wud bc h EcC Un. My jb ws pn B R’s v

dvp p-gh cnc c pscuFuny, I nhd gup s nvsg h chng. I ws s b cu xc wys wk n h Un, u wh  judgs. By wkng wh h s nd d

w ncsd d css v 350% nd k g nd cpx css. W dvpd nv

nd chnqus (h hd wy) h cnnudy. My ngn chnqu? Idny gdnd h d h jbs. In 2004, I

c wk pv qubu cnnud cnsu

un Fbuy nw hv sw pcc (n, d cn dncnnu cnsu ncn gnc

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 29/57

 

I t’s payday! You’ve just received the first paycheck from 

  you nw job, nd you n’t wt to gt th hk dpotd;t , you’v ovd thwy o th ounty nd n dpt nd o o nw

  untu. You jup n you ,  pug th bnk’ dd nto you GPS (to k u you n tuy

  gt to th bnk—you hv ony bnth on t ), nd tt to dv.Th dv ptty p. You  

  phon ng. It’ n od nd o bkho, o you nw. Th d ght to b tkng ov. Fny, you v t thbnk, y goodby to you nd, nd hd nto dpot you hk.

NW3C’s Cpu C Scn hs bn xpng hpc S Sc Dg Dvcs (SSDD) n u vydy vs. Lk bck h scn bv. Yu GPS dvc cddh ddss h yu ypd n, nd kp ck h pns

ng h wy; ckng h ph yu k h bnk. Evn  yu hdn’ ypd n h ddss, h GPS wud s ck hvn yu c. Wh n yu p, yu kd yund n yu c phn. h s pny nn hcn b ghd hs. By spy chckng h c phn’sc hsy, w cn dn wh yu w n cnc wh.Fuh nvsgn wh h cu pvd cn us hwng yu kd n h phn – dwn h scnd. Pvdscn vn us yu cn bsd n h c ws yu wusng whn yu sd nd ndd h c. W, s nvsgs,cn sy us hs w cns s nd ck whyu w whn yu cvd h c, nd yu vd dung hc. W cn hn us hs bck up h GPS nn. On p

hs sndd SSDD dvcs, h s vn pny usu nn s h y xnd. h cs quppd wh bck bx h cks vhc nn;such s spd, bkng nd dvng hbs. h c gh yuw sppd s quppd wh vd sys dc dgh vns c pns. h OnS sys h y b nsd n yu c cud s ck h vhc’s vns, pssu nd spd. Nw, gn h nsd gng h bnk dps chck, yu w gng h b . A  hs nn s vb w ncn; hwv, du ck vb nng nd sucs hs nn sgy unchckd.

Bsc C Phn Invsgn (BCPI) cus s NW3C’s scus dvpd ddss h pn vdnc vb SSDD. BCPI s w-dy cus dsgnd pp n ny h nsc nvsg, bu s nyss, dcvs nd pcs. h cus ddsss h d vb sucsxn h c phn s, ncudng wh d s vb,hw bn h d, nd hw nyz h d cvd. hcus s cvs h ppp cns s spndwhn h physc c phn s nvvd. N spc hdw sw s qud, jus nw knwdg bs ppy yuxsng nvsgv/nyc sk ss.

Why dd w s BCPI? W, s n cnsdn

pn c pus n hs cunyIn 2005, h w

n cu subscbs n hhs s n nc

s 650% 1995. hs

wh cun sU.S. ppun 304.8

pp2, ppxy 72% uphns. Scnd, n wd wh M

RAZR h wks n h A& nwk s dhn h M RAZR h wks n h Spn n

h cs c phn nscs ( ccuy c phn ngn) s n phbv ny gncs. In hs v chngng wd, w ncn schsng h chngy. By cnvnn wsd, hs w cnsny chsng h dvc. Bu why? In h dgs vyhng w d s cdd swh. hs s w

dcdd cus n h d vb w ncn bh whch s kp n h phn.

h wh nn vb c phsupsng. h C D Rcds vb h pvds d dd nn n h cs d nd h suspc hn vb vh phn. hs ncuds h s nd s w usd h c whch ws h nvsg s h sucn whn h c ws d. I s vn pssb h cnn suspc’s x ssgs h svc p(hugh hs d s sd ny d ). Wcbnn hs d s pssb knw w

suspc kd nd whn; sbsh suspc’s cng p k gus; s vn n pssb dh cn suspc spcc . A hs ncn b bnd whu vn hvng ccss h phn

C phns xnsvy ngd n u wy ncssy us h s pn suc vdnc s b nd v. BCPI s h nx sp by NW3C pw ncn wh h knwdg nd sk s ncsgh vdnc n h v-ncsngy hgh-ch wd.

BCPI csss schdud bgn nx y. Vs www.n vb cuss d by NW3C. q

References

Inop. CIA Wod Ft Book 2007. 2007. Rtvd 7 Aug1.

 o http://www.infoplease.com/ipa/A0933605.html 

U.S. Cnu Buu. 2008. Rtvd 7 Augut 2002.

http://www.census.gov/main/www/popclock.html.

 About the Author 

 Jutn Wyk Coput C Spt o NW3C nd hwth th ognzton n 2006. H nty b Ctd

Coput Exn though Th Intnton Aoton o CInvtgtv Spt. H pvou xpn nud vn

Countntgn Agnt n th U.S. Ay.

w w w . w 3 .

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 30/57

 

32 I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 8

The articles featured in this issu

focus on network and computerintrusions , and how theses

intrusions are enabling^a^growin

/scope of cybejz&rifne. MW3C's

(tomp irtpp^fTmes Specialist Nick

Newman kicks off the FeatureSection with this introduction.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 31/57

 

Cpu nusns w nc spy gdd s sch (sy) hss hcks nng h spus n h undgund hck cuny. Hv, gnzd c nd s gups hv qucky wd su du ucv wds ID h-nbng cpu nusns. E hs y,Esn Eupns (wh ky s h Russn ) w chgd n c

ncn wh h gs cd cd nub hs n hsy. T d h ppd hugh wss nwk nusns h pkng s nj ss, ncudng h w-pubczd J Mxx dny h cT v ngd gn ccss hundds csh gss nnwd ghd v 94 n Vs nd Mscd nubs, sung n J Mpyng $40.9 n USD cd nnc nsuns. In nh cs, cns wh s A Qd usd sn cd cd nubs und W

ss png Jhd nd png s ppgnd (n nnhnc cun ppuns). Cpu nusns n jus bdcd Wb ss ny—cpu nusns bu sus ccng sus cs.

In ddn bng quck, sy, nd dcu--ck ny-kng vu cyb cns nd s gnzns, h Inn s hs b

cgnzd s vb h nn scuy. In wh ws cd s h “cyb w,” Russns gd Esn’s cnc nsucu n 2007 wssv nwk-bsd cks nd bugh Esn’s gvnn, d, bnkng nwks scchng h. In Augus 2008, whn Russ b cnvnn nks-nd-sss cnfc wh s suhn nghb Gs cyb cks gns Ggn d nd pny Wb ss wbsvd. Whh h cks w s-spnsd jus wdy pp

n’s cyb s dcu pv. Hwv, hs ncdns dd pv hInn ds hv h cpby bng shng nus hn juchns shng nn.

On h wng pgs yu’ n bu hw nwk nd cpuusns nb h ppn nuus h cs such s dny spng, ud nd ny undng jus n w. q

h p : / / i . w 3 .

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 32/57

 

by Nicholas R. Newman, Computer Crimes Specialist, NW

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 834

by Nicholas R.Newman, Computer Crimes Specialist, NW

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 33/57

 

B A 2007, w hd bn s cpy dsssd hughu

cpu scuy nd nn dns ccs, bu s wsbwng n h s Bc cuny Esn— s h wudsnc ny dspus s whh h Inn hd h cpby  suppng ssv dg s css wd-wd bd.

Esn s sghy s hn Nw Hpsh nd Vn(Und Ss) cbnd nd hs ughy 1.3 n czns1.

A h h Sv Unn, Esn usd wh sucs hd bud n s -ncusv cnc nnnsucu scch. dy, Esn s cnsdd n  h s wd cuns n h wd2. Usng ID cds, Esnnsd vyhng ng x uns vng chckng hbnk sus, nd hy d cncy. Esnns y cy csh vs cu bnks; ny ny nscns dn hugh bnk cds (uch k h db cd sys usd nh U.S. nd ny h cuns). In Esn, Inn ccss sy bsc hun gh. F cuny svng n Inn-bsd cny nd sy, n nsucu such s Esn’s s phnn chvn. Hwv, h nhn sng pn u shud b vy ppn: h ny -ncpssng

cnc nsucu gs dwn, h cuny wud c n bup nd gndng h.

nn, h cp Esn, ws pd by s s bwnhnc Esnns nd Bc Russns Mch My 2007.nsn cxd n Ap whn h Esnn gvnn cdh Bnz Sd, pcud h , nd hn xhud ndcd h ns bw h su ( WWII- Sv W) dwnwn nn w cy. hncEsnns, h Bnz Sd psnd dcds bu Svccupn; Bc Russn cs, h Bnz Sd ws h Sv Rd Ay sds wh dd ghng hNzs. h vn h w nun spkd s, bh nh ss nd nn.

On Ap 27h, s Esnn gvnn Wb ss bgnncng n unusu ncs n c, cnssng c ds3,SYN ds4, nd ICMP ECHO ds5. By Ap 28h, cks hdspd nuus ddn svs. A hs pn, h EsnnCpu Egncy Rspns (CER) dnd hh cks w s swh cncd6. h Russn-spkng bgsph ws d wh dg c--sssgs, pvdng sp nsucns n hw pcp nh ck n Esnn svs. Sv xps s vwbn h Inn7 (Fgu 1).

h x, n Fgu 1, bwn “@ch ” nd “GOO s sp bch h w  png 10 ch g sv yw n-husnd scnds spns, nd hnn h nx g. h pngng squnc ps nnchn unnng hs s nd sp pg n ccus uch dg, bu whn husnds nd ns h cpu syss un h scp sunusy, h dscnsquncs cn b dvsng.

h sh ssg11 wng h pg scp ncds cpy h bv x n “.x” (x) nd h “.b” (xcub scp). h scnd n hh h scp s xcud, h gd Esnn w “hng”. h hd pgph s n p gncng cyb-s ccvy ck 23:00 (11n Mscw, Russ nd 22:00 (10:00PM) n Kv, Uknquss cds gh s ny cyb-ns s ph h pcp n h cdnd ck, hcv h ck w b.

On sv spks n h Inn ck cud hv jusuk, bu dung n pd h cyb ck, Evn’s nnbund c und vdnc udng h c h bns nvvd n h Inn ssu. Iny, dsbud-svc cks w gnng usd Esnn nsung n h ncdn spns bckng nddsss. L n, s ck ws unchd nsEsnn nsucu, cng n ny nw d.

h cks w vy succssu. hugh h vu pcks ws vy s dn--svc ck, hws jus h gh sz n cv ck gns cuh sz nd nsucu Esn.

Iny, h cnc cks gd Esnn gvnss, bu cscdd n h svcs s w. In ddn

Wb ss h Esnn Psdncy nd s pn, gvnn cs n Esn nd pc ps, hs s ckd h Esn’s bggs nws gnzs w s cuncn s nd w h cuny’s bnks14. Esnn Bnks hv n bn “bnks” snInn bc s pvsv s s n Esn. hs ck cd g pn Esn’s nn nhndng s nn nscns bng cph wds, Esnns cud n puchs ssns sgcs gsn. F pd w wks15, nn(sy Russn nd Russ-syphzng) cyb-pds , cvy shu dwn h nn nd cnsucu Esn usng n hd h hn

dn--svc cks v h Inn.Bng h s s knd, h Esn ncdn nducsqusns. A s p hs cks, s bynd-sd b cncd; hs cks w gnzws h gnz? Esnn cs ucy pnng h Kn16; h Russn gvnn, nddccusns, spndd dnsvy nd cd hv n d wh h cks. A b h Nsh 17 (Наши) c hv gnzd n h cks18, bu h vy nu dsbud dn--svc cks ks ndng h u h ck nx pssb.

h nx qusn sk s: I gg gng cyb-

Fgu 1: Bog nty ontnng pt o utoty ttkng Etonn v.

Continued on p

h p : / / i . w 3 .

How a gang of Cyber-Rioters brought a country to its kne

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 34/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 836

by T.R. Sreekanth, Cyber Forensic An

Resource Center for Cyber Fore

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 35/57

 

h p : / / i . w 3 .

“I PB” nsc nvsgs; hwv, h c s n s nw. h

c w ng s Bdbnd h Inn h. hs cybc cn vy sng Inn cnncnpsswds ssv h Inn cnncns. W n n gb ‘nwkhd’, b wd wss. h Innnd d nwks hv bc n ng p u scy nd h hs bn n xpnn ncs n h h Inncnncns. I s n ng scn whn sbdy gspnzd hs wh k g us n bdbnd sd-n Inn cnncns. A cn xp y b

sn wh wns cyb cé cng hug b h Inncnncn, vn h pd dung whch h cé s csd.

L us k n scn cncnng 15 y-d K “h Gd’s Own Cuny”, Ind. H ws gu

  vs Rnbw Cé, c cyb cé. h by ws vy chncy su nd ws wh h Inn. h cé hd bdbnd cnncn pud Inn Svc Pvd(ISP), whch wns V Chnns n As nd v h wd.In n nsnc, h yung by ws hvng pbs ccssngh Inn h nd bgn us h bdbnd cnncnvb sch h Inn sun hs bdbndd pbs. In hs Inn-schng ndvs, h sd

xpng vus knds ds, d dvs, dnns nd s n. hugh hs nn sch, h und ubu h SIGMA Md ( p pduc busnss nsh qu bdbnd cuncns, ung ch vcsvcs nd d nwkng). h SIGMA d s cnknd dvc h ws n us pgng hd, nd n cn sy chng h MAC ddss. Wh hs,h ng bgn hck n h Cé’s d’s MAC ddss.

In h dd 2007 hs ‘d g’ c h nn h Cyb Pc n K, Ind. h Cyb Pc gsd cs n h cpn h ISP, whch pd h n scuss ws gnng hug bs, vn hugh h Inncnncn ws n n us.

h yung by, nnd , bc nsd n dhckng bynd jus sp chnqus gn udun ccss h Inn. h by sd usng h SIGMA d s hck’s . Lk hcks, b hckng cb d,h sd nng bu h scuy cb ds ndh vunbs. H d us h w dcnuncn n h d. hs ‘hckb’ bu h dgvs cn h cb d h hck.

A cb d s usuy dnd by h cb cpny by sMAC ddss, whch cn usuy b und undnh ds nscks wh b cds. hs MAC ddss s knwn s h HFC(Hybd Fb Cx) ddss. h ADSL d wks by usng hd knwn s hndshkng: Whn h d s swchd n,h d w p s sks. Fs h d w sndu sgn syng, “Hy, I hv h MAC ddss XX.xx.XX.xx.XX.xx.” h svc pvd (Md pvds) hn chcks hMAC ddss gns h dbs. I h MAC ddss s n

 vd, h d w n b b cunc wh h cbcpny’s nwk. I h MAC ddss s vd, h d wb ssgnd cngun . hs dns h bus  h cnncn, such s h spd h cnncn. S bscy h d sys “H, I’ hs MAC ddss,” h ISP hn sys“Ys, w knw wh yu , nd w wn yu un hs spd”.Onc hs hs bn dn, yu g ssgnd n IP ddss ndh hndshk pcss s cp.

B sng MAC ddss, hck w sn h MAC d ny PC h s cnncd cb d wh vddss. Bu h MAC ddss n w b n us. hpn n h hck nds cnsd - n w shud hv h s MAC ddss. I such sun ccds w g n b p, dswng Inn cc

Evy cb d gs n h cb nwk wh s MAC ddss. hnk h svc n ISP ddyu cy s h sgnd scns n ng. W cn sgn h ‘ng’ nd n w MAC dd

h sgn w b h s. Whnv cnd dnn, s ng s s n dn sgn h nwh gn, w spy wk bcus h ISP pyh cb d’s MAC ddss whn n sgn nd dw w dnc MAC ddsss b nn [gsdnwk] whn h s sgn. h sgnd sph Inn cb nwk s dn by bdbnd hubs.

h chng cd by h Rsuc Cn Cyb Fws dny whh ny chngs “spng” hd b h MAC ddss. Ou nsc xps sssd hpc n svng h ssu. W nyzd h ISP cnncdnd h vn whn h cé ws n usng h gMAC ddss, sn ws usng h s gsn c h Inn. h bngs up h qusn: hw dd h g h usn nd psswd gn? W dnd ws b ns kyggs n h cé’s cpus Inn psswds.

Hw dd h yung ng cy u hs pn? Fpuchsd d ccss h bdbnd ccuns. u nvsgn, w und h h ISP sv hd vunh wud dscs h MAC ddsss nd h buh cé’s dbs. As cyb nsc nvsgs knw hsv sy vb sw pgs n h Inncn b usd vn by 7h gd d unwu nn ch s sw k DHCP Fc, MAC Rp, nd ny

h p snng dcn MAC ddsss. Exchnc knwdg s n ndd us such sw. hsy hds vb chng h hdcdd MAC usng cn hckng ds k M SB4200, SIGnd s n. Wh hndu s w pg knwdg Agbc nd Lgc Pgng (Aw ddsss cn b sy dd.

I s wys chng nvsgs cch h cwh pp vdnc, hugh s c h h c hcd. In h Cu Lw, pp vdnc nkdc scn s us n d scu cnvcn. hws n dn. I ws h budn nvsgs, wh h h Cn pduc vdnc h c. h HgC Inquy c, K, nd u Rsuc Cn Fnscs, hd nghy dscussns u pns ccn d-hndd. Wh h hp h ISP, w h us h Inn ccun unuhzd nd unnupg wn h Inn cnncn ws s psn cn, nd h ws n usng hs gsd cnncn. hppd s c suspcs wh w gu vsscé. Ou nvsgns k us budng n h RCé. F h suspc s, pc cd yung by, 15-g n h budng wh ws pcn n cpu uswh hd bn gvn psgus ‘chn Excnc’ whs sch. h pc dd h hus whn h by wsPc g h cun MAC ddss, cun IP nd gn

Continued on p

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 36/57

 

38 I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 8

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 37/57

 

h p : / / i . w 3 .

D psn cpu busnss cpu nwk? D yu

us h pys wkng v yu, wh yu und yu?Ds h busnss gncy yu wk h s buyu? D yu hv h ncssy scuy pcs n pc pc yu nn, d, dsgns sw? I dn’ hnk ny us cn nsw “ys” ny hs qusns whu

hvng s dub.

In Ocb 2006, h L Cuny Sh ’s Oc Ecnc CsUn n Cp C, Fd cvd cpn busnsswn gdng gnd h nd h gns ncuppy. h suspcs, bhs “” nd “Mk”, wh gd Pnd, w pyd n 2003 by h vc, “Chuck”, whwnd 812.081 Invtnt, sw dsgn cpny. “”nd “Mk” w gny hd by ”Chuck” hugh n pysng cpny nd hd spcc xps n Wb bsd swdsgns. In Ocb 2006, ”Chuck” c n h c nddscvd h cpu “” nd “Mk” w usng wudn b up nd un ny pgs. “Chuck”, sn dscvd h

hd dv ws vd h cpu. A sch h cs dscvd py cds ’’ nd “Mk” ncudngsgnd nn-dscsu gns w gn. ”Chuck” ud u bugy s h ws n cd ny nd h ny pp h hvng ccss h cpu hd dv nd v v h wn py cds w “” nd “Mk” A s,”Chuck” ws n vy cncnd bu h ssng hd dv shy hd ppy ghs v h Wb bsd sw, whchw dsgnd by h bhs. ”Chuck” ws s w h hy w sng h pgs n scud, s sv whch wsnnd by n ndpndn cpny. ”Chuck” d cncwh h cpny wh ws hd s h d h bhsw dsgnng nd dscvd h d nd sw hWb bsd pg ws gn. ”Chuck” nd h bhsnv uzd h s sv nd s h dsgn swhy dvpd snc 2003. ”Chuck’s” Wb bsd sw ws ncpn h h nd ny dy b unchd.h vu h hd dv ws ny $350. Hwv, ”Chuck”sd h u pck xpns h cpny hd nvsdn h dsgn hs Wb bsd sw n h sn hd dv,s ws $2.5 n ds. ”Chuck’s kng sch hs Wb bsd sw sd h pn vu 812.081Invtnt b n xcss $10 n ds, .

Sgn Jnhn Wsh wh h L Cuny Sh ’s Oc

Ecnc Cs Un ws ssgnd hs cs nvsgn.h nvsgn ws vy sgh wd. h cpny sud sp gnd h v $350 du h hd dv bngsn h cpu. Invsgn cnd h cpun whch h hd dv ws vd ws usd sy by ””nd “Mk” dsgn hs Wb bsd sw nd hy bhknw h psswds nd ccss cds bn h nn h hd dv. I ws s cnd, “” nd “Mk” nvsd ny d h sw dsgn, s qud, n h  s scud sv. 812.081 Invtnt sud hug nncsss, ng wh h pn ss uu nngs du hsh. ”Chuck” dd bgn h pn pcss hs sw ndnnd hdcps h nn n n pc

h nvsn.

Sgn Wsh d nuus ps c nd h suspcs, “” nd “Mk”, whch ydd ngv “” nd “Mk” subsquny d Suhws Fd vdnc bhnd c h. Fnnc cnscns w vwd nd Sgn Wsh sn h suspcs d h Und Ss Eup. h hpn pndng sw h vc, 812.081 Inv

ngvy pcd h busnss. 812.081 Invtncd dsgn h Wb bsd sw ddnpc h nvss’ nss. 812.081 Invtnt nddn nnc sss nd xpnss s su hby “” nd “Mk”

A hs , “” nd “Mk” hv n bn cd L Cuny Sh’s Oc hs cv s wns suspcs h d scs nd cs gns ch n   812.081 Invtnt ws d hs pc h cu vc’s busnss n. 812.081 s h S Su bzzn/h d scs.

h nn shd n hs c s h vy nd, hv h ncssy chcks nd bncs whgnzn sss n h pcn yu ’s d, s ny h dg d ncu ppy spcusd cnduc yu busnss. Whu h nccnsn xnn yu ’s pcs nd pcyu vng yu cpny vunb hcks ncpu nusn nd h. q

 About the Author 

Sgnt Wh h bn wth th L County Sh ' O o 1Sgnt Wh h bn n nvtgto n 2002 nd h nv

hundd o popty nd vont . Du to th v hngno ud nd thnoogy ud to ot ud, Sgnt Wh d pon to nvtgt nn . Th L County Sh

dntd nd o unt ddtd to nvtgt nn 2005 nd Sgnt Wh w on o th t nvtgto

th unt, whh unty nvtgt vou t o ud thth ounty to nud; h to dud, gnt opu

nttu popty, ktng, hk nd dt d ud ud, t. Sgnt Wh h ttndd nuou n nd

on td to ud; v o th though NW3C, nd tudyng to obtn h td ud xn dgnton. SWh b o th Intnton Aoton o Fnn

Invtgto, NW3C nd ACFE.

The names of people and business(s) in this article have been changed as the investigation hasconcluded; however, the case is not closed.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 38/57

 

I 2006 P R C 27  bch ncdns, 100,453,730 pny cpsd cds

nd v dny hvs wh w snncd dudng 238 vcs. h d bchs w cssd s cng usdhcks, nsd snc, hun/sw ncpnc,nn-pp h nd pp h. 1

On h bggs d bch’s ccud J Mxx, j s, wh hcks nudd h nwk w ss nd sv 46 n db nd cd cd nubs hn 100s v sv ys.

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 840

h pups hs c s psn h j ssus hs h scuy nwk d, dn nn/nusn nd pvd s h cn hds dnd sgncn sbshd nusn pvnv pcxzng Inn nwk d scuy.

hreats to the Security of Internet Network Da

Accdng DataRecovery.com,2 h v j chs h scuy nwk d. hy :

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 39/57

 

D .1. Knwng h svs hv dcpcy hnd sv quss, hcks nud nwk by dng wh quss hn cnhnd, whch cshs h sv. hs h s vy sy d bu hd d wh.

IP q IP !2.

Bcus p uhncn n h IP Pc, h svh s ckng yu Inn nwk sv pnds b sn s (wh dn IP) nd, s su, s b gn unwu ccss h sv bng ckd.

S j.3. Sssn hjckng s n ncdby dngus nwk d scuy h wh h hck kscn us’s sssn, sung n vy sus scuy bch n whch h hck cud cps snsv usd such s psswds vn cd cd nn. Fxp, us y b ccssng s ssn cc d kng n Inn puchs. A h , sssn hjckks cn h us sssn, hby gng ccss hsnsv sssn d. h us s d bv h h hsbn ggd u nd h gs bck n.

I .4. hs s by h s bvusnd dngus Inn nwk d scuy h.hugh h ssng scuy pchs n sw

ccss psswds, h ck s b pc huhncn nd uhzn chcks g ccss cp dbss nd ssn cc s. hs Innnwk d scuy h cn b svd ny hughpvnn h hn cu by sgudng psswds,ugh psswd us c.

P .5. Physcunuhzd ccss u d cn cp svs s sh gs h Inn nwk d scuy. Gd dcns hv nwk d scuy pcn n h  ngpn bsd uhncn nd vcn cdns pns psnn vsng h d cn.

Intrusion Detection

Wh d yu d yu suspc yu nwk hs bn nudd?h nsw s nusn dcn, whch s h scnc dcn cus cvy n cpu nwk nd h bsc dv nwkng scuy. DataRecovery.com csss nusndcn nwkng scuy n w ps:3

Inn nusn dcn – hs s n ncdn wh1.

sus cus cvy xss h cpssnwk scuy whn h cpu nwk (ypcy nn gnzn ud).

Exn nusn dcn – hs ncdn nvvs 2.

hck cck wh cks h cpu nwk h usd.

h w gn nusn dcn hds.4

Ou h dny xcpn nus nusn1.

dcn. hs nusn dcn hd s n chckng ny nw sng ccss n h cpu nwk.

Dcn bsd n ps pns nusns. h2.

s sndd pns nusn n cpunwks nd pn bsd nusn dcn s nchckng s hs nusn pns pdn cpu nwks.

h p : / / i . w 3 .

Established Practices for Maximizing IntNetwork Data Security

Ov h ys, nub sbshd pccs xnwk scuy hv gd. hy :5

P I 1.

ccpsh hs, bnc bwn ccss svscd ccss hugh nwk d scuy shpu n pc.

D .2. A ypc gd Inn

scuy pcc s usuc h hsng csvs d cn h cn cus n pvdnInn nwk d scuy, d cn dss nd ugh physc d scuy. hs w hp dc ccss svs by unuhzd psnn

H I 3.

s ndd n Inn nwk d scuy pcy s pp buy-n pys, dssnn nwk d scuy nn hndus pycncs nd pp Inn nwk d scuy u

A I .4. Updsw wh s pchs. Updng db

png sw w hp duc h nby hcks s hy p xp h vun pckgd sw such s h png sysdbs vn spczd pckgs such s CERP pckgs.

I .5. G n nsndd nwk d scuy w nd sgunwk unwnd nusns. As, d uds yu nwk d scuy w usyu Inn nwk d scuy s n cp

I 6.

. Us nw nwk bckup sgs d bckups nd d pcn k b

guy, vn whn yu syss v. As, syu bckups, s css bckup hndng cud bbggs nwk nn d scuy h.

Pcng psn d n nwks s j scuy pUs hs c gn usu bsc nn h nvs Inn nwk d scuy-d cs. q

References

1 “Chonoogy o Dt Bh 2006”, Pvy Rght CnFbuy 1, 2007.

2 “Intnt Ntwok Dt Suty B nd Rvw – Th ThCu nd th Sttg o Intnt Dt Suty”, www.data-re

reviews.com/intrusion-detection-reviews.htm.3 “Intuon Dtton Rvw o Ntwokng Suty”, ww

recovery-reviews.com/intrusion-detection-reviews.htm

4 Ibd.

5 Op.t. www.data-recovery-reviews.com/intrusion-detection-review

 About the Author 

Robt E. Hott, Ph.D., th dtnguhd poo o AounRh t Cnt Whngton Unvty. H h pubhd nut on dntty tht, dbt/dt ud, uty bh nd dtod. H b o th dto bod o th Joun o  Aountng nd Fud Mgzn. H o wt oun on dn

 o th Fud Mgzn. H n b hd t [email protected]

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 40/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 842

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 41/57

 

h p : / / i . w 3 .

The human brain is the best system ever created for recognizingpvusy undnd pns bhv. Un cpus

b ch h nyc cuy h hun nd, uddcn cyb nusn w , spcy gvn h hghy dpv nu h h. Cnsquny, xsng sgnu ndbhv bsd dcn syss nd b ugnd by hundvn nyss hy succd. O. S Sydj, CEO CybDns Agncy LLC, ns h “Dnng h gh sgc

dcsns s bs pd by cv w-nd huns.hs ks cyb dns , suppd by scnc,n un.”1 h nx gnn cybnusn nyss s pvd p huns pdy xc vn nn nd c cnb knwdg.

he Impact of Adaptive Behavior on Cyber Defense

E hs y, schs dscvd h n h gsbns v cpd, Kkn, hd cpsd v 400,000hss. Rkby, w hn 20 pcn cpus unnngAn Vus sw w b dny h dyncy phngsgnu h w. Such nusns w n d hswh unsphscd dnss. Kkn pdy vdd h

nusn dns syss s 50 Fun 500 cpns.2 hs yp gn, dpv bhv hs bc hk  cnpy cyb nusns nd hs vd syscwknss n xsng dnss: h dvsy s b vv h

  vc ck s hn ud dnss cn b updd.Ahugh hs y ss nvby bsd wds h ggss,h hv bn sv cn chngc nd hdgcdvncs h k h s sps wds vng h pyng d.

ONE BOX: he PayPal Experience

h bng gwh -Cc psnd cpns kPyP h sngy ncb pb cbng ud

n h nn pyns spc. Mny cpns n h kpd us Ac Ingnc, ssc chnqus,chn nng, nd pbbsc scng ghs pck bhv. Ununy, h cks knw h hy ny ndd y nw chnqus un hy und n h sppd by h ud dnss ndssy xp hs sys.

PyP ws s z h ud syss n cudnv sy hd h ck. Insd, hy dvpd nwppch: w huns nc wh h d dny pns bhv n y cgnzd by ud syss. hsuccss hs hdgy s ppn n h y h PyPcnnus hv wh s cps hv d h busnss.

Nw cyb dns nd nusn nyss syss ugnngxsng ud suns wh cpbs dsgnd hphuns pdy ggg, dcph, nd sh nwk dnsnn. h nx gnn cyb nusn nysss pvds p huns pdy xc vnnn nd c cnb knwdg. Such knwdgcn b d bck n ud dns chnss hus wngcpus cus n pp csscn nd huns cusn dnyng gn pns bhv.

Next Generation ools in the Wild

h wng dpcs scn shs cyb nusn nyssuzng nx-gnn p.

Th ny bgn wth n utotd t onnng dd onntd by uty vnt. A htog o thton dpyd gvng th nyt hpu htzth dt. In th gph, t pp tht th nt goudd tht nvovd n oon ntwok o yb

 Movng dp nto th ny, th u h dntd -ogntng o v ontod by n IP dd th ttkng ntwok. At th botto, n ntgtd tn dth tpoty o th vnt.

Contnung th pvou n o nquy, th nyt h gon nto th “Not Counton” ognzton, by vwo th popt otd wth th nod, nudng t v

 gogph noton.

Disclaimer: though th dt h bn nonyzd, th pob t ptud n th oowng tpnttv o n tu nyt ot ung nxt gnton yb-ntuon ny otw.

Continued on p

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 42/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 844

CY-FI:

by Dr. Marcus K. Rogers CISSP, CCCI, Cyber Forensics Program Departof Computer & Information Technology, Purdue University

T Futu

Cyb Fic

Tpic Ti Iu

MaCInTosh ForensIC

A I ,  focused n Mcnsh nscs. I s pbby gd d xpn h

h ysus scnd-h h hs cun. In ncns, ws n uncn cgphs ndc unknwns by pcng dwngs dgns n h ps. S nvsgsI hv kd ndc h dng wh Mcnsh cpus

App dvcs s dny unknwn y. Hpuy, w cn bgn s ny hs dgns nd s ch h unknwn.

As I s h wng hs cun, w Pudu Unvsy hv jusnshd chng h-dy nducn Mcnsh nscsnng css w ncn. Ppng h s h css ncd y b h Mcnsh cpus k nxcn p nvsgng dg vdnc, nd y hs , psn unqu chngs nvsgs skd whxnng hs syss dvcs.

I s qu sy g ud n s sns h hs s scy Mcs/Wndws wd. Bu n c, wh h nducn  

h In chps n Mcnsh cpus, App s ncsng sk sh dcy y--y. I w v u cus wy  scy cpus nd k dvcs n gn, App nc hs h k sh n sv scs – dg usc dvcs(Pd), nd vn s phns (Phn). A vy cn suvy cncudd h Mcnsh pps w h bggs ss nunvsy cpuss n h Und Ss, vn supssng D.

I shud c s n sups h Mcnsh cpus bngusd n yd dn cn cvs. Cns n gnnd cyb cns spccy gvng wds h nn-Wndws bsd cpung ps. S hv ndcd h hsgh b du h bu-n “cun nscs” w ncnn bng wh nyhng bu Wndws-bsd chns.

Cns ssu h w ncn s ncpb dng

wh nn-Wndws-bsd png syss such s McCns nd s bv h h cun cp s cusd xcusvy n Wndws/NFS, nd hn wk w n h syss such s EX2 Mc OS

Gvn hs cn cuu b, nd h y h

cpus gnng sgncn k sh, bnvsgs bc wh Mcnsh cpuMc OS X. Ov h s y, w hv sn dc n h nub nvsgns w hv sssd n h nMcnsh cpus, Pds, nd Phns. Onc n gs n shck n bng n n NFS wd, h Mc OS X s n y h dn. In c, h uch gnd WVs shs n cn wh Mc OS X. Wh h nb bks (s nc scn) h cn sss h nvn bcng wh h sucu Mc OS X, hsubsu hnds-n xpnc. h vy w pcny v Mc bks, Mcs, shud w nvsgb puchs s n sys us n h bs.

Ununy, h b h h cun sck nss ckng n s by d ppy wh Mc OS X s hs hs ppd sv cpns bgn dvpnscs s h n ny hnd Mc OS X ppy, bun nvy n Mcnsh syss (s h nc sch nd hs c). Hwv, d, hs s gphcy u s h Wndws cunps, whcncs h nng cuv s nvsgs.

Evn App s hs cgnzd h w ncnvsgs nd sssnc n dng wh Mcnsh cnd dvcs. In d ddss hs dnd, App hs spsv sns, Wbcss, nd supp pgs dvd

nvsgns. Continued on p

‘There WIll Be Dragons’

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 43/57

 

h p : / / i . w 3 .

C jnd  ncudd n c u nd dwngs ng

b h nvnn h Inn. Hwv, h Innhs dcy chngd h undgund wd chdpngphy by ncsng h un chd pngphy pducd, s vby, nd h cncy dsbun h chd pngphy uss. Rsch suggss h hchd pngphy ndusy gns ppxy $3 bn

nnuy, nd h h ughy 100,000 Wb ss wdwdng chd pngphy. In ddn, s ssud h hpngphc cnn h gs s ncsng n dvsy. Du h ncsd vy n cnn, h nds b sys npc h cgzs h gs n d pvd n vundsndng h nd’s c ccns.

In d cgz h gs’ cnn, h COPINE(Cbng Pdph Inn Nwks n Eup)pjc h Unvsy Cg Ck, Ind, dvpd csscn d. F h ps dcd, hs Eupn pjchs cnducd sch n Inn chd pngphy nd sus by dus sxuy nsd n chdn. Hwv, h hs

bn ny s sch n h Und Ss. In d

ddss hs gp n knwdg, Pudu Unvsy’sFnscs Lby s cung Und Ss w ncs pcp n sh, nnyus suvy.COPINE’s csscn d, pcpns w b scssy h Inn chd pngphy gs hy hvs vdnc 2005 h psn, usng n nnyuby-sp nn qusnn.

Agncs wshng pcp n hs sudy, uh nn, ps cnc D. Mcus RgPudu Unvsy’s Cyb Fnscs Lby v [email protected] phn 765-494-2561.q

S W 

G D E (SWGDE) bngs gh nsc

scnc pcns n h d dg nd udvdnc. Ou dscpns ncud cpu nscs, nscud nyss, nsc vd nyss, nd nsc g nyss.Ou ssn s h-d:

bng gh gnzns cvy nggd n h d•

dg nd ud vdnc

s cuncn nd cpn•

nsu quy nd cnssncy whn h nsc•

cuny 

SWGDE ngs pvd u pcns nd xchng ds, chnqus, nd bs pccs. W uny pubsh suc dcuns h n dg nd udvdnc cuny nd nng n cung dg dgvdnc pcs. Ou s d h nsc xn nbh h by nd h d.

SWGDE s spnsd by h Fd Buu Invsgn C

Anyss Rspns (CAR) Un. Hwv, SWGDE’s ss n s bshp dvsy. Ech b gncy, nhw bg s, hs h s ppuny hp shp SWpubcns, cus nd dcn. I s hs pnshp b

 vd nsc pcns, schs nd ngs h pvn nd y supp u cuny.

SWGDE gu (vng) bs ncud d, s, nw ncn psnn. Assc (nn-vng) ncud u cgus cd, pv ndusy, nncn d gncs nd nnn w ngncs. As Jnuy 2008, SWGDE bs ncudd(20) s nd c gncs, nn (9) d gncs nd nssc gncs.

F nn n SWGDE, ps vs www.swgdbshp ppcn s vb http://swgde.org/membershW ncug nsd nsc pcns ppy.

F nn bu SWGDE [email protected]

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 44/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 846

L , bus chngy hs n bn s n

s gngs.

On such -cgnzd gngcuncn s h us g “ggng”.Ms ubn sngs hv gwn usd sngspy-pnd cns c gngs. Nw,g cn b und s nywh: d-szd s wns nd nds vn phs w zns h Acn d csccupy shwng sgns gng kngs.

ggng svs w pupss gngs: n s  vsb k cn und h cnnd w, pvds v gngs wnng h

h y s vd, n s scn. Bu physcy cng g uns h sk gng sdsnc s usuy c. S, dy’s gngs unng s ndss vn g ggng: cybbngng.

Cybbngng s h wy gng bs us Wb ss p h gng-d cvs. Ms juvn gng bsbgn by cng Wb ps hugh ppu sc nwkngWb ss k MySpc (www.myspace.com), Fcbk (www.facebook.com) nd hs. h pups s c nncv ggng h shws h bs, vcsh bvd nd vn hps wh gng cun. Ms Wbss w dspy gd gng bs hdng vus wpns,g scks ny nd s h w b dspynggng sgns nd yng cs. h pp dspyd n phgphss wys hv h cs cvd pc h dns. Inddn cnnuy bshng h vs, h Wb ss ypcy bss h ps cn cn ccpshns. Dspbng nw gng-pn, hy s j suc ngnc Gng Mngn Uns (GMUs).

In dy’s dn Inn wd, s n dcu ndnn n cybbngng vn nd u wh s dng .G ny h ppu vd upd Wb ss such s Yuub(www.youtube.com), Gg vd (www.video.google.com),MySpcV (www.myspace.com) nd yp n “cybbngng”n h sch d nd yu w s hw ny pp vuny dspy hd vs ppuzng gng cvy. h s cnb dn wh sch ngns such s Gg, Dgp, ny hhs sch ngns. Add yu sch sng cnsns suchs yu s, cy cn gng ncs nd y nwh scn dwn csy yu ggphc cn.

Bcus h ncsd us cyb-suvnc by GMUs, gngshv vd ny h c ybbngng j Wb dnsnd hv sd us Wb bds ps h dcnsnd hs. Yung gngss vy chngy svvy nd vncu n “gks” hp p nd vn scu h gng’schngy pns. hs subsuu chn-ns gng cun nd usuy d n hs ush ch sks hp h gng’s ssn.

h Bwn Undgund (www.brownunderground.com) s Wbs h ws cd p Hspnc c uu nd hg; nc sch bds w pnd h pubc s gb cuny cuncn, Ln gngs sd usng “cybbng” hvs. Sn, cd hvc h Wb s’s dnss ndbugh unwnd ngv nn s gng cyb “h sp”.

Phs nd vds py bg p ny hs ss nd usuy  h vd s n p h s, nk dng vd Wb sk Yuub s pvdd. h gng cuu s hvy bddd whusc nd s gng’s vd ss py u “gngs ps” hdnsh ck h vs. Lw ncn gns shud vwnd cpy hs vds cuy; hugh cs y b bscud,k s n h xpsd ps h bdy k hnds, ncks s. Lk h bckgund h vd; s bng d n k bd? k nc s n cn shs dn wh ws d. Vcpns y s b chdnd shud b cnsdd nvsgv nd vdny pn.

C phns uny usd s hd cybbngng sncgng bs w x ssg dsspcu hnnghssns v gng bs, h s nds,ss hus h ngh, spkng y ncuns.Schs b chngy dung n nvsgn shudcnss dnyng sd x ssgs (sn nd cvd) ndh phn nubs h w sn cvd h dvc.

A suggsd pn pn w ncn s dny whchgngs p p n yu gn. Onc dnd, bgnsndd Inn sch v sch ngns, sc nwkng ssnd k vds n Yuub, Gg vd, MySpcV, c. Sch psngs by usng cn sng s cy ns, cy ss,knwn gngs, nghbhds gng ns knwn bs.

Chck h ch bds, Wb bds nd gus bks Wb ss kMySpc, Fcbk, nd hs sc nwk ss h sp nwds gng cvy, kng n psngs whs x c spcu gng’s knwn cs (xp bu d, c). Ppuusc gup Wb ss h psnv h gng cuu usuy hv sc nwkng ch scn nd hs shud b xnd.

On h bs sucs cybbngng ngnc ghng(nd gng ngnc v) s hugh h c Sch Rsuc

Oc (SRO). hs s usuy w ncn c ssgnd hc sch dsc. hy w pbby knw wh s h j

 juvn gng pys , wh s gd cun, whch gngbs qun h sch’s cpu bs n d pssby whch Wbss h gng bs qun. I’s s gd d sk schcpu nwk dnss hy w nyn yng ccss gng-d Wb ss, y v whch un succ (URL) Wb ddss kp und suvnc.

Cuncn nd vgnc h kys succss whn cs gng nvnn nd nvsgn. Shng sucs nn bwn w ncn dscpns nd usng hs nn chngy bs h cns us nd bus d h g cvs sks wh bnng.q

h p : / / i

Ref 

 

erences

Gng Mb Utz Th Intnt: Cybbngng, Ntbngng,1.

Phon Bngng, Txt Fng, MySp, Rp Dng, MgPot Bhng 

http://www.operationnogangs.org/083007KFOXInternet.html 2.

Cybbngng, t’ d, but gng tht - Wb pg3.

 gv po nw ook t vont v

http://www.4rowproductions.com/4row/Random_Reason/ 4.

Entries/2008/2/9_cyberbanging.html 

Gng u Intnt to bng out g o pd, ht5.

http://www.knowgangs.com/gangs_news/extra/March/ 6.

march_2005_016.htm

Gng n Md. Thow Rv Cybpunh7.

h ttp : / /www.was h ing tonpos t .com/wp- d y n/conte nt/  8.

article/2006/04/13/AR2006041301911.html 

 About the Author 

Dond F. Ctt, MSIA wok o th Nw Jy Juvn JutCoon thn ntuto. H td po tnng ntuto nd o w nont o who h povdd tnng bout gng nd yb- to d nd tt w nont gn.In ddton to h gdut dg n Inoton Aun (oput uty), h gdut o ny w nont yb nd oput on tnng pog.

The next Informant will featu

on the topic of  Investigating

Digital Devices, such as cell ph

and blackberries. If you have exp

expertise in this area, we welcome

submission to be featured in the I

Send your articles and article idea

[email protected]. Deadline

articles for the March 200

January 15, 2009.

Help others i

fight again

cyber and ecocries.

Contribute y

articles an

ideas to th

InFormantma

Share your expertise, experi

knowledge with Informant reade

looking for articles on any topic

cyber or economic crime.

CA

F

O

R

A

R

T

I

C

E

SThe leader in Telephonic Intercept and Analysis

 for over 20 years now delivers

Real Time IP Intercepon! 

Pen-Link, Ltd. • 5936 VanDervoort Drive • Lincoln, NE 68516 • 402.421.8857 • penlink.com

TMTM

Email • Instant Messaging • Web

Chat • P2P • VoIP • 3G/EV-DO

Pen-Link Xnet is an IP

Intercept Collecon and 

  Analysis system targeng

Intenet communicaons for intercepon.

TM

Featured Pen•Link Products

Pen-Link 8.1 is the industry standard telecommunicaon

intelligence and analysis soware.

Featured Pen-Link Products

net

Email • Instant Messaging • Web

Chat • P2P • VoIP • 3G/EV-DO

\

Cyberbanging

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 45/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 848

M S P C C U  h Inn Cs Agns Chdn (ICAC) Uns hs

bn wkng n nvsg P--P css.Mny hs css su nn pcv pnsgng hs nwk. Ou ssn s nvsg nncs gns chdn; n h ssu P--P css, w nvsgng h cpus knwn suspcs cv chdpngphy vds uncd spc. hs vd s xchngd bwn hs hugh h Inn. W hd sh hs css n u sys; hwv, n ng ssus cusd by h c Rcdng Indusy’s s sp hdsbun cpywd .

W dscvd h u P--P cs gs hd cny cvd s xpnng h hy y hv bn nvvd nh dssnn cpywd (usc s) bsdn cpns hy hd cvd h Rcdng Indusy.h sudn’s cns w d h usc s hcpus. In h pcss hy s dd h cnbnd vds h w w kng .

W us sck nsc s (Encs nd FK) u bs xn cpus h w hv szd. Rcvng vds n uncd spc hs hscy psnd us whs dcuy s hy nd b g nd spn ny cuss.Uncd cuss s h cpu’s hd dv hy hv bn usd s pn, bu n cuny ssgnd ny s. Whn s dd y s xs n s ny 

n uncd cuss h h hd dv hs n bnvwn by h d.

Ou nvsgns g suspcs shng vds w hvdwndd nd vwd usvs s w cn sy h h s cnbnd. Snc w hv hs vds n w s ush s suc h schs. F ys w hv dn sys schng vd hds c nd ps

 vds n uncd spc. h pb wh hs chnqu sh nds gn hundds s psvs h cn dh sg dv nd k ny hus vw.

W’v cny bgn pnng nw chnqu nvs gu p--p cs, usng Encs Sw. In css wh w w h suspc’s shng cnn, hs nw chnqu

ws us sch scn h cu vd d. Onch d s cd, w xp nd vw usng vd pysuch s VdLn (VLC). hs pcdu cn ky b dnwh ny h cc nsc s.

Collecting data from known video

Ech vds w hv n xnd n hxdc s h h w d s xpsd n hxdc s ws n s x nsn. h w d s hn cpd scn h d h pps jus h vd hd. Igny us bu n hxdc chcs xp:

3 24 2d 36 1 4c 2b 2 1b. I hv und h yu nd nuy cpy hs chcs s ppsd cpy nd ps.h sh h scn d yu us h g h khd s-psv hs.

Onc hs nn s ccd yu cn nw bud dbsusng Wd Exc s h yu hv ky wd ch h

 vds yu y b kng n h suspc’s cpu.

Searching the suspect’s computer

d h cu schs c nw sch . In hsxp h sch wud b: \x3\x24\x2d\x36\x\x1\x4c\x2b\x2\x1b nd yu wud nd chck Ans Ln -1 ndGp. h “\x” ndcs yu wsh sch h hxdcchc dcy .

Recovering the videos

Onc yu hv s hs h sch s yu nd cvh d. W us Encs hs pcss, bu h gncs’pcdus y b dn. W xn h sch hs n x

 vw. I yu xn h jus p yu h yu y swh pps b h ’s hd. h nx sp s cck n chc n hs nd xp h d n cus ngsng h cn h cus nd sc “xc s xcbny”. h sz h yu gng xp dpnds nh d ng yu n. n n w gn hs bu 10 gbys n sz; 100 n w c 100

gby . Gv h n nd us n xnsn .pg h xpd .

Viewing the recovered videos

Ou uss VdLn vw h cvd vd. I’s  vw nd ss d wh cupd d b hn s  vws. Eh ssc VdLn wh h .pg xnsn pn VdLn nd dc h yu xpd.

Yu y nd xpn wh h sng p n nd sz h g py, bu w hv hd kb succss cnghs vds wh vy w pcng s psvs.

h p : / / i

Future Plans

I hpng hv n xcn cd n h schs suspc vd s u h ccn pcss.I bv hs cn b dn wh scps.

I h s cn b hvsd h g bs NnCn Mssng nd Expd Chdn Inncn Igs,h s cud b usd uch k hsh nyss. h ky dnc wud b h hs cud b bnd p dd s whch wud b ssd by hsh nyss.q

 About the Author 

Sgnt Gnn Lng h bn poyd by th Mn Stt Po o 19 y nd h bn th upvo o th Coput C Unt n2001. H unty th ICAC Cond o th Stt o Mn nd td on xn though Gudn Sotw (EnCE).

 WE INVES

LAPTOP T

LEAD TO S

CRIMINA

LAPTOP O

 WANT TH

COMPUTEYOU WAN

DUNK CA

Jennifer Bramlett

Regional Recovery Manager

Law Enforcement Liaison

770 877 1717

[email protected]

www.lojackfor

amu.apus.e

or 877.777.9

American Military U

Push your mind. Advance

Respected online intelligence degre

focused on Criminal Intelligence, H

Intelligence Analysis, Intelligence C

Intelligence Operations, Terrorism

of other subjects.

 to meet the evolving homeland secu

face every day. From psychology of

language courses, my AMU educatio

experience in the Marine Corps to h

fulfill my mission of protecting our co

country’s freedom and ideals.

My AMU edugives me the

Technician, Fe

Graduate. American

EMMHUM

AbsoluteSoftware

OWN V I D E O S IN

5PACL

MAND L R^, MA INE . 3TATL POLICE.

R L COV E . R I N G. IQsT

U N A L L O C A T E D

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 46/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 850

The Business of Dri

F , ,bs c nd cn cns wshng

p nnyusy, bnng n cy ssud s dv’scns s cc. Cns g bu bnng g sssud dv’s cns by usng n dny h bngs sns cng c us dny gh. Bcus wh cnb dn wh uduny bnd gvnn-ssud DL ID cd, cns w g xdny nghs g h.

Dv’s cns ud s bcng pn ppwh hv nd h U.S. gy vsyd h vss nd wk, pn bnk cc uns nd g nsunc. Dv’scns ud s, n c, h h ny wh c c s.Obnng dv’s cns n nh psn’s n cn b nndspnsb sp cn b s c c ud by n, chck w ud. Mv, cns pvn w ncn dscvng h cn’su dny. Wh d sucs, dcv s ky  spnd nvsgv n hs css wh suspc’su dny s knwn s suspcd.

Evolution of Driver’s License Fraud

Snc Spb 11h

, s s DMVs css h cuny hv ddd physc scuy us dv’s cnss ndID cds h k h dcu cun .hs hs, n g dg, qud cns g s-ssud cd h hn buyng k h s snc sks d p jb ckng h nw scuy us.

Acns usd by cn bn n cy-ssud dv’scns ID cd usng nh psn’s dny hv vvds dny scuy hs bn pvd s DMVs. N hng g, sn cud, n ny ss, y bu whhy w nd c hy s h dv’s cns. Dv’s

Lcns (DL) xns, n ny ss, dd n hv ccss DLph gs n nc h psn ws n ps.

Onc h dcncy ws dd, udss ndd ush dny sn vng u s. hs cud n bccpshd by psnng cun “bd dcuns” –hs dcuns usd g DL such s bh ccs, gncds, pyn uhzn cds, Sc Scuy cds u--s dv’s cnss. Bcus gd nub DLxns n s ss hv cny cvd nng n hw sp cun dcuns, gng cun bd dcunsps h s bcng pbc cns.

Cn vnds udun dcuns nw, hn v, bcng ds uhnc bd dcuns(dcuns usd bn n ID dcun). hs gvnn-ssud dcuns sd n h s s h sn cnpsn h s DMVs uduny bn s DL ID cd. hs “ps ud” s n h s css h cuny nd, wh uh ghnng n h hzn wh h cngd R ID Ac; hs sch w bc vn pvn.

h R ID Ac w qu DMVs cncy cn hh nn n bd dcun chs nn nh dbs h ssung gncy. In h wds, n ppcnpsns Msssspp bh cc, h n, bh n ndDOB w b sn cncy h Msssspp c vcds cnn. I h psn psnng h Mssssppbh cc n Wscnsn s n ps, h uhncdcuns w s b ppvd bcus h nn chswh s n h Msssspp c v cds dbs.

Whn s DMVs bc pcn dcng pss,h ny vb cus cns wh wn c

Invtgto ofn ook o “hddn” uty tu, uh th, to on th vdty o dv’ n.

h p : / / i

by Dean Reynolds, Chief Investigator, Kansas Department

ver’s License Fra

dv’s cns ud w b cupn – bbng dv’s cnsxns. Incdns nn ud ng h ssunc  dv’s cnss hv sn dcy n cn ys n DMVsn ps h cuny. Exns hv bn pd svhundd ds nd n s css v $1,000 ch udunnscn. Ms hs css nvvd h ssunc dv’scnss g gns nd sv hv nvvd schsdsgnd ssu dv’s cnss p p cn nd suhAs s w s h Mdd Es. Dsp h c h hy dwh snsv nn nd chgd wh sgudngh pubc gns dny-d c, n-n xns n ng h ws pd n s gvnn, vng hndusy p ud.

Using echnology at the DMV Front Counter

Rughy 30 ss nw usng c cgnn chngy n s shn n h pnnng sg pnngh ud dcn chngy. Fc cgnn chngy cps h ggphy cs n dbs. In hs ssh us n--n ch, h cun ph n ppcnw b cpd cncy gns h s ph kn hppcn n n sp pss. In hs ss h us n n--ny cpsn shn, psn wh dy hs DL n h s nsnc, pps DL n nh n,h DL cpu sys chs h phgphs busnsshus n h d h s ph ws kn. Onc h ch sdnd, h ppcn s ggd suspcd ud. Ssh py hs chngy cn un c cgnn nquy n h DL g suspc s yu cn chck yu suspc susng up dns. S ss h us c cgnn gng h cpby p xn phs un ccgnn chck gns. hs cn b nvub n dnyng suspc whs dny s unknwn.

Imposter Fraud

Auhnc bh ccs h bs quny usd by pss. Unk gn dcuns, h n ccs. Wh nhng h dcun cn cn c b jus bu nyn ws g.

A bh cc s cny h s bu cn wshng c dv’s c

  v cds cs ccp quss hughh Inn, kng dcu vy hpsn s wh h sh cs b. Idnc

h d v cds cs ngcps. Auhncng cps ID dcuh gns s gny unchvb bcuscuy us n cps. Mv, udcss c b y b h pshy png s.

h s quny usd bd dcuns un Knss bh ccs ssud n Pusc cuns cs n xs. Wh bPu Rc nd xs bh ssy h quss h n ppcn b U.S. czn bn h U.S., bh cc Pu Rc why n ppcn ds n spk Engsh. I s Sc Scuy cd b sd wh h bp “s.” h Sc Scuy cd, k cnns n ph.

Cn vnds scu h uhnc dcu

buyng h h c•

hphn uss)

kng dvng jusdcns (c•

x n h ssunc bh cc

cupng cs wh hv ccss•

c bnk ccs.n uhnc dcuns bh•

Sc Scuy cds. S cn vu by vd ph ID dby y b ccssd nd pcd s dv’s cns wh phn ppnc h ppcn.

Breeder Documents: Sold vs. Ren

Cn vnds uhnc dcuns n w hngs: 1) Rn h dcuns. h n pys sy $1,400 h s dcu

Suty tu, uh th, hd to dupt on  udunt dv’ n.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 47/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 852

We are seeking qualified applicants for 

our online Economic Crime Programs

 

For more information:

866-295-3106

www.onlineuticacollege.com

Visit us at the

Economic and High-Tech Crime Summit

Online Masters Offerings

MBA - Fraud Management

MBA - Professional Accountancy

MS - Economic CrimeManagement

Online Bachelor Offerin

BS - Cybersecurity

BS - Economic Crime Inve

und, h n y g $600 bck. h vnd w nk su h h s s dcuns s n sd w ppwhn h s s bcus h scnd psn wud n b b g DL/ID cd. 2) S h gn uhnc dcuns. Inhs scn, h vnd ypcy scns h gn dcunsn hs cpu b ng h wk s h cundcuns cn b pducd w. h cund dcuns hn sd pc ss hn h gns sd ppn dn ss. Buys hs cun dcuns y bv hy gnun dcuns.

Whn cnducng ps nvsgns, s n unusu dscv v dn pp n v dn ss shng h sdny. h dny wh h ngs hsy wh gd pubccds nd cvy s ypcy h u wn h dny.

Detecting Imposters

Bcus ps ud s h uu dv’s cns nd dny ud, s cc h dv’s cns xns, w ncncs nd nvsgs cv nng n ps dcn.A psn wh hs succssuy dudd h s DMV ndpsns s-ssud DL w ncn c hdcun vw cn s b cugh h c s w  wh k nd hw pcd n dcng pss.Dcng pss s gny 3-sp pcss cnssng xnn wh h psn s (physc chcscsncudng hs c, hgh nd wgh), h dcuns n hspssssn nd wh h knws. An ps’s knwdg hdny h hs sn s gny shw nd cn b xpdwh h gh nvw qusns.q

 About the Author 

Dn Rynodon th Ch Invtgto o th Kn Dptnt o Rvnu. H Ctd Fud Exn nd Ctd FonIntvw. Rynodon th n jut ou n djunt 

 poo t Whbun Unvty.

 Mot uty nd uthntton tu on dv’ nn’t b n wth th nkd y, hown h.

chat

hate802

d

OLLEGE

ONLINE DEGREE PROGRAMS

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 48/57

 

h p : / / i . w 3 .

nd psn whnhy cng c? Invsgs h Fd Oc  Fnnc Rgun g h chnc s nsdh nd wh c cn dung nng sn,wh hy xpncd unqu gus spk- cnvcdnvsn swnd (wh w’ s “M. Swnd’). M.Swnd ws cnvcd nd svd n j png Pnz

sch. H shd gh n hw h ws b dud nvss.

Fs, M. Swnd dd up unqu busnss cncp,cygncy zng bd b sd dc uss by h dn. pp g, M. Swnd puchsd shcpny h ws ncpd w ys . h sh hd sck dng syb bu n sss. Is n nd syb w sny vu. hs gv h pssn h h cpny ws undng hn cuy ws.

s cp, M. Swnd sd nn nh pssy ns,kng dvng phs n h s nd d scusws. H d upn n xpn gsn vd

guy scuny nd d p. nc nvss, h dhgh hn vg s un n h pssy ns. hns w unscud nd sky. Invss bvd hy wnsud nd s.

H ssud nvss h busnss wud b succssu nd pb.In spc, h cknwdgs h busnss ws “dsgnd ”bcus ws pssb k ps n nn nhs, hpd n whch h pssy ns wud c du. Hd n unds nvss k ns pyns hnvss - h - sgn cssc Pnz sch.

M. Swnd s ndd ss c bcus h cudn’ d

spnd hs n h phn, kng hs cpny pn nvss. H hd “gu” nsunc gns whdd n du dgnc nd w psudd by g cssnchcks. h nsunc gns sd ns. Ms vcs wsn czns cnvncd v h nnuy nvsnsn h vnu.

In , ss hn n cnsus cuy sgnd up hv hbd cygncy psvd. h busnss ws bus. hFd “by” csd dwn nd h d pubczd sds. Sn, nvsgns w unchd n h busnss ndh pssy n pg. M. Swnd ws xpsd ndvnuy pd guy cn chgs. H cvd v h

ys n psn, dd hs nd ws sd.

Ahugh M. Swnd ws dd py sun, hs h h w nv n nugh ny n hs py bck nvss. H s ssns nd nbsvns.

dy, “h Inn s h nw ss c,” sys M. Sw“Yu cv knds bgus nvsn ppuns -. cb hs, yu shud buy n-spng snd gn nvsn c-ns.”

Invss n hs pn w d h nvsn ws

I hy d h ng pspcus (hs wh cvd wud hv nd hy cud s h ny h bwsn’ succssu. H s sd, ccuy s, h s nddn’ d h pspcus nd k h pss ss n c vu. Rcvng hgh hn vg uns ssupspcus wud n b d.

Invss w s d h pssy ns w ndpnnsud. N s. In y, M. Swnd wnd h nsunc cpny. A nvsgng wud hv vnsunc cpny wsn’ cnsd d busnss n h U

Anh d g ws h h ss ssud cs ndds (C&D’s) gns M. Swnd nd hs busnsspubc dcuns w vb nyn wh skd

h ssg n hs sy? D yu sch b nRb h h n sk- nvsns, ny nvswh vyng dgs sk. Fny, d sunds gb u, hn pbby s!q

 About the Author 

  Mk Mthon Fnn Adntto o th BInvtgton, Fod O o Fnn Rguton (OFRgut th bnkng, nn nd ut ndut n Fod

hdqutd n Th nd n b hd t 850-41

[email protected].

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 49/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 854

I ABC N , I  wng gn: “In ccuss U.S. nd Bn undng

ss.” On wud hv sk hsvs s hs ccusnxy -chd vn y pssb? Is pssby h ss bng undd, knwngy wh ns d nh Und Ss? hs c w xp h pssby cunds d h n h Und Ss nd shppd bd usngcsh busnsss nd us.

Sw wnshps busnsss wh n psn psns cvs h nnc bns dcy h cpny, bu s n sdn ny g pubc dcuns s h g busnss wn.

F h ps sv ys, h Azn Dpn Lqu hsdnd “sw wnshps” n sv cnsd ch pss.h vy sns h subjcs ngg n swwnshps nd b g undcd ng pds .A w h sns h hv bn dscvd s ws:

A psn s cnvcd n•

A psn ds n wn dscs hsvs s h wn•

n d vd bng dcd nnc sns suchs: x vsn, dvc, & ny undng

A psn s n g sdn h s h/sh sds•

nd/ ds n hv g sus n h Und Ss

A psn s nvvd n ckng nd/ gnzd c•

Lqu sbshns “csh busnss”•

Funds bng shppd u h Und Ss h•

cuns

hs ‘busnss wns’ cd Lqu sbshnsbcus s ‘csh busnss’ ndncs. Css hv shwn h svy sy hv sn pcd s “n psn” n chcns ppcns. A n psn s n ndvdu wh s gy qud wn busnss nd s qucns cnsu buws h psn(s) p h busnss g sns.Iny, n psns cn g undcd ng pds bcus h c gvnng bds d n vyng up

ppcns h d wh cnsng gncs.

Onc h cns s ssud h “n psn” nd h bs n pn, h hddn wn hn s b “cnbusnss whch ncuds h csh vnu dvd sbshn. hs ncuds csh ch us such qu ss, hs nd pv cubs.

Mup cs ypcy cd n h cnsd pwhch ncud: (Bsd n cu css cnducd)

Nccs dngs•

Mny-undng•

Rpd cs vnc•

Mup qu w vns•

A-hus vns•

Fu cpy wh h guy gncy quns: dpn vnu, c xng uhs, wcpnsn nsunc, nd ndus cssn, ypc sw wnshps.

B psnng sw wnshp css pscun, nvsg w ky ns: Cn nd Fnnc In

“C” s h pw dc cus h d h ngn nd pcs n ppcn, cncnng psn, whh hugh h wnshp scus pnshp ns, by gn h

“C ” s psn dcy ndpssssng cn n ppcn cns.

“F I” s h Cnng psn wh bnc ns n n pcn h bcns cnng psn.

In xnng c cnsu sv ss, “Cnd “Fnnc Ins” s cn. As cnssn cnsng gncs s h qun h psns wh n

cn cnsd u hv b dscsd nd bck

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 50/57

 

h p : / / i . w 3 .

hs b cpd s h c gvnn knws wh s ncn h busnss wh s sndds nd dsqucnc.

Onc h cs shws h s vdnc h g ns n cn nd n dscsd, nnc bckgunds shud bnd shw h nnc cn. hs cn b ccpshdby dng h wng dung n-s nspcns nd xnn busnss dcuns. In sv css sn n Azn, hwng busnss dcuns cn c h c cn:

Escw dcuns usd dung h cqusn h•

busnss

Appcns nd qusnns subd c•

gvnn cnsu

Cncs, ns, pssy gns, nd cps  •

cncd chcks cshs chcks

Bnk ccun ppcns, sgny uhy •

dcuns, dps nd whdw sns

Lc uy ppcns nd ccuns•

h xnn cpn dcuns nd d•

by cpny dcuns, pnshp gns,nd dcuns ng Jn nncy wh Rghs  Suvvshp

h ng qub ns dcuns, s knwn s•

UCC ngs

Any nnc wng d bd usng vus nnc•

nsuns

Insunc nd by dcuns•

On c h hs bn vy cnssn wh n psns usdn ppcns s h c h hy d n hv h nnc

ns bckgund h wud w h puchs hvsuch g nnc n cqu h busnss cns.Rqung h n psn pduc p h nncsuc cn gv nvsgs gd pcu wh h undsgnd .

hs gudns cn b usd hp w ncn dcsw wnshps whn h qu-d ndusy. Onc ssbshd h g ns n cn, nvsgs hv ck wh ns cng n, wh s cuy pd,nd wh h ny s gng. Sw wnshps shud bkn susy s hy hv h pn b nnc ns supp g c gnzns. q

References

 ABC Nw onn, My 13, 20081.

http://www.abc.net.au/news/stories/2008/05/13/2243684.ht 2. m

 About the Author 

  Antono Rb 13.5 y vtn wth th Azon Dptnt o Lquo Ln nd Conto nd h n-dpth xpn n obtng wht o uoundng quo bun. Antono h bn nw nont o tot o 20 y whh nud gnnt nOgnzd C, Fudunt Dount C, nd tt gutoynvtgton. H nd h Bho Dg n Bun n 1995 oth Unvty o Phonx nd h tught tw ownhp nvtgton

to utp w nont gn.

AccessData® introduces a new paradigm

in forensic investigation…

FORENSIC TOOLKIT®

AD ENTERPRISE

AD EDISCOVERY

SILENTRUNNER®

AND MORE…

Now, one company gives you

360-degree visibility into all data across

the enterprise. With AccessData you can

build a single solution that allows you to

search for, analyze and preserve

host-based, structured, RAM 

and network trac data.

Learn what AccessData can do for you

at www.accessdata.com

Paraben 's

CSI StickCell Seizure InvestigatorivirViv.c5f5ffcfr.com

Samsung Support

Version 1.0

Motorola Support

Features:Downloads Textual Data (Phonebook,SMS,CallLogs.Etc.)

Downloads Multimedia Data (Graphics.Camera images.Videos.Etc.)

Downloads a Logical Image File (Active Rleson the Mobile Phone)

Downloads a Physical Image FNeiAvaiableonSomeModeliwith LongDow

Upgradeable (As Support for New Cell Phones is Added, ouCanUpdateYour

CSI StlCk starts atOnly $199.00 USD

Also Available DS Lite!

The Perfect Tool for CSIStfcK A

Only $99.00 USD

801.796.0944

ParaDen's Forensic Innovations ConferenceFind out more by coming to our FREE user conference in No

www.pfic2008.com

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 51/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 856

SAE AUDIOR SACEYPICKERING ANNOUNCES HREEARRESS FOR KARINA FRAUD

Jackson, MS – S Aud Scy Pckngnnuncd h ss h ndvduschgd n ud d h p s su dg Hucn Kn. JsHdg, 45, Wggns ws sd n Mndy,Jun 9 nd sd n $20,000 bnd wngchgs ny h p ud. Hdg,

png s J & J Cnsucn, nd n cnc nd cvd $10,000 n pyns wk n sdnc n By S. Lus h wsnv nshd. S Aud’s Oc ppcsh sssnc h Any Gn’s Oc,Sn Cuny Sh’s Oc nd Hncck Cuny Sh ’s Oc n hs cs.

P Hwd, 47, nd pn Rb Sh,52, bh Mb, AL., w sd dy n h chg ny s pns. Hwdnd Sh, png s Pcn By Hs,cncd wh h vc pvd ndcnsuc du h n Pscgu. A

dwn pyn ws d $140,000 hh h ws nv cnsucd. Bh Hwdnd Sh w bnd h Jcksn Cuny Adu Dnn Cn. h Jcksn Cuny Sh’s Oc nd Jcksn Cuny DscAny ny Lwnc sssd n hs csdng h ss Hwd nd Sh.

“hs ss k v snc hbgnnng 2008 nvvng cncsdudng sdns dvsd by hh Hucn Kn ng hMsssspp Gu Cs, “sd S AudScy Pckng. “h nvsgs wh h

Kn Fud Pvnn nd Dcn Unwkd vy dgny bng hs ss.h Oc h S Aud s cd nvsgng Kn ud css ndbngng hs cnvcd cngcs jusc.”q

PHILADELPHIA MANSENENCED FOR FEDERALBANK FRAUD CONSPIRACY ANDIDENIY HEF CHARGES

Richmond, VA -An Bush, g 27,  Phdph, Pnnsyvn, ws snncd

dy hs n bnk ud nd dny 

h sch. Und Ss Dsc JudgHny E. Hudsn snncd Bush 75 nhs psnn. hs snnc ncuds cnscuv wny-u nhsndd by hs cnvcn AggvdIdny h. Bush ws s snncd v ys supvsd s nd dd,ng wh hs cdndn, py  $373,892.95 n sun. h snnc wsnnuncd by Chuck Rsnbg, Und SsAny h Esn Dsc Vgn.

In Jnuy 2008, cdndn Kvn Bwn, g31 Wngb, Nw Jsy, ws snncd,n h s chgs, v ys cnnn,v ys supvsd s nd dd py sun n un $378,000.

Bush hs cknwdgd pcpn nh cnspcy Dcb 2005, unMch 2007. h sch nvvd h us  cun chcks h w psnd chns. h chcks w cd usngh ung nubs g nncnsuns. Whn pssng h bd chcks, hdndns psnd cus u--s

dv’s cnss n h ns ndvdus.h cnspcy s spnsb ngng $378,785.28 n cun chcks nscns ccung n Vgn nd hss ng h Es cs.

h cs s bng nvsgd by wncn cs h Hnc Cuny Dvsn Pc nd h Und Ss PsInspcn Svc nd bs h M-Rchnd Idny h sk Fc. Inddn, h sk Fc cvd nvsgvsssnc h Nn Wh CC Cn bsd n Gn An, Vgn.

Oh b gncs h sk Fcncud: h Und Ss Sc Svc;h Fd Buu Invsgn; Buu Dpc Scuy, U.S. Dpn  S; h Rchnd Pc Dpn; ndh Chsd Cuny Pc Dpn.Fd pscuns h sk Fc hndd by h Und Ss Any’sOc nd h Oc h Any Gn h Cnwh Vgn. F nn n h sk Fc, ncudngsssnc vcs dny h, vs:www.richmondIDtheft.com.

Spc Asssn U.S. Any ndAsssn Vgn Any Gn Dk s pscung h cs n bhUnd Ss.q

CYBERCRIMES UNI PREVCRIMES ONLINE

Baltimore, MD - h BDpn’s Cyb nd Ecnc Un sd 40 y-d Dvd F

Owngs Ms, Md., n My 22, sxu scn n.Fzkn n cusdy whn h shwd Dcv Sgn Lws Ypsd s 13 y-d g. A sszu wn ws xcud Fzwh sv cpus nd pphw szd.Sgn Yn, wh s d gng sxu pds, sys, “guys nn chng wh , hs b chng wh yu kds.”q

CFO SINK: AMPA DUOARRESED FOR OVER $40,0

IN PIP-RELAED FRAUD

ampa, FL – Fd Ch FnncAx Snk dy nnuncd h sp wn n chgs hy bd nsunc cpns v n Psn Injuy Pcn- (PIP)ud chgs.

E Mjn, 34, nd Yusdn Vds, 24, p gd subd udun bs ng v sv nsunc cs. Mjn Psn Injuy Cnc, nd Vds, h

cpns, subd udun bn n ndd. h w w Mndy, bkd n Hsbugh

 j, nd chgd wh Scnd Dg InFud nd Pn Bkng. I cnvccud pny c up 15-ys n

h Dpn Fnnc Svcs, D Insunc Fud (DIF), ws sssdnvsgn by h Nn InsuncBuu (NICB) nd AIG Insunc.

h cs nsunc ud s such s $1,400 y n pus

vg Fd y. h DIF nv

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 52/57

 

h p : / / i . w 3 .

 vus s ud n nsunc, ncudnghh, , u, ppy nd wks’cpnsn nsunc.

Dpndng n h sd ss un,h dpn w py up $25,000 nn dcy dng n s ndcnvcn. Anyn wh nn buhs ny h suspcd nsunc ud sskd c h dpn’s Fud FghsHn 1-800-378-0445 g n www. MyFloridaCFO.com/fraud . Cpns cnb ckd nn.q

POSING AS GIRL, REIRED COPNABS PREY

Diamond, MO — N n w v cnusJ Muy wh ng. Hs ,bd shuds nd cppd gy h gvh wy h gndh h s. Bu h69-y-d d pc ch hs sMssu wn cus cdb gu s 13-y-d g sung h Wb, kng nds. H knws h nsn-ssgngshhnd, h cns.

Muy’s n jb u hc hs nd 20 ss snc h sdn 2002. Hs s cch ws h bggs: uny ncn chgs gns wny, wh hs s cd Muy upnd bggd h k h cs g wy.

h nnn h dndns ncud Mssu unu cpny xcuv, nAknss pss nd us, Ok., schscuy gud. n hs n hv bncnvcd nd sn psn. On ws dpd.h h css s pndng.

h dndns ngd n g 24 62,wh n vg g 39.4 ys, nd hy ny c Mssu, Aknss ndOkh, Dnd pc sd.

Inn chd sy xps sy pc csk Muy hs wh d gd wk h cs wdng hugh h uck nnpdph nss.

“H’s bz. 2002 ws vy y s pc dpns s dnghs,” sd Py Ab, xcuv dc  

Wiredsafety.org , chdn’s Inn sy gup. Muy, wh ugh ny sch 27 ys b swchng pc wk,s hub.

“hs s y bu h kds,” h sd.

h s hng h hnds p h s n nvw s n pck nwsppss bu Kc Wdy, 13-y-d gn nghbng Aknss wh ws bducd,pd nd kd by n sh nn. I’sn cs Muy wkd n. Insd, h sd,’s “ v.”

Muy sd h ngs shk h nncnvsns u hs hd wh, buhy cn s k h ngy.

“h’ b s whn yu jus wn chhugh h scn nd chk h sph,” h sd. “ hnk hy cud k hwy g.”

h s dndn s An Kun, 63,wh sgnd s y Cns nd ps p L Chuch h ws sd

Jn. 11 h n hs s wn bu 110s suhs Knss Cy.

Kun dcnd Wdnsdy dscuss hspccs hs cs, ncudng hw h pns p nd hs wy dd n un phnssg. Kun dd n pps n cung n ny h xchngs sd n hchgng dcuns.

Bu ccdng cu dcuns, pscussy Muy ws ggd n Yh! ch s 13-y-d g nd “cndyndnd”usng h scn n “Cn” whn h ws

s cncd Nv. 15 by “duk dukd,” whpscus g ws Kun.

Duk cncd Cndy gn h nx dy nd sd h ws 55 ys d. h xchngncudd:

Cn: k to nh k ... no boy tught .

duk dukdk: but t dpnd on wh youwnt to b kd t o.

In s v nsn-ssg sssns hughd-Dcb, Duk gdy wn n Cndy h wnd hv sx wh h, skd nud phs h nd suggsd Cndy hvsx wh nh g n n Wbc sh Duk cud wch. Muy hs sdh n vng yss hy bvdhy w sng up wh h dcv’sng psn.

Muy ws ch pc n h wn  Dnd 1995 2000. H g psncpu ng nd dscvd chs nd ws ngd whn h ws dpcus yung gs. H cncd xpsn h d Inn sng pn nd gnng h Nn Wh C CCn n bsc cpu d cvy.

Nw, Muy ps h Wb cpdh c dvdd bwn hs pccpu nd psn cpu ngdwh phs hs sx gndchdn nd hdu kds.

Muy ns dcv n sv suswh h Dnd pc bu h dns hsnvsgn . H sys h ny spndsbu 30 nus wk n vg n chsbu sv hus gng v hd dvs sd suspcs kng cncs wh

h pn vcs.

“Sv pp hv sppd Wnd h ng sn nd sd hy pwh w’ dng n h Inn suh’s gd ng.”q

FORMER SAE EMPLOYEEPLEADS GUILY OEMBEZZLEMEN

Las Vegas, NV – Nvd Any Chn Cz Ms nnuncdh Jhn E. Dp III, g 30, Lshs pd guy w Cgy Bcuns h wh Vu PpExcss $2,500.00, n cnncn w pyn s h Dpuy ExDc h Nvd S BOsphc Mdcn. Ech cun cpssb snnc 1 10 ys n p

“h Any Gn’s c ks scnduc by S pysusy, pcuy whn h scnvvs h pubc unds,” sd AGn Ms. “Anyn wh kn such cvs by S pysp h Any Gn’s nvsgn.”

Dp’s guy p ws n xnvsgn cnducd by h AGn’s Buu Cn Juscvd h dung hs pynNvd S Bd Osphc Mbwn Nvb 2004 nd JnuDp bzzd $60,698.54 h ny by gng chcks d pyhs nd hs, gy bnusng S Bd cd cd ppsn s nd bzzng dunds py h cd cd db h bzzn.

h snncng hng n hs schdud Spb 9, 2008 Dsc Cu Dpn 15.q

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 53/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 858

h nx qusn sk s: I gggng cyb-snd cup hdbns cud shudwn s cuny  dn--svcck gns h

nsucu nh gvnn?Whn such n ck s cnducd, whpn ds h ck cnsu csus b,n Ac W, sung n dny n?

In h 2008 Annu h Assssn  h Ingnc Cuny h SnAd Svcs C, h sspcc nn “…nns, ncudngRuss nd Chn, hv h chnccpbs g nd dsup ns h U.S. nn nsucu…”19 

Phps h s pn qusn, “Cnhs hppn n h Und Ss?”, hsbn ddssd n Wshngn; n ddn nd, w, nd sky, Nn Scuy dpns hv xndd Und Ssy supy n cybspc. hs pubczd y dpnddssng cyb cks c bu n2008, whn h Und Ss A Fcd h A Fc Cyb Cnd dcy cb nd dnd gns hh cyb ck gns h UndSs20. h U.S. A Fc; hwv, s nh ny bnch h y ddssngh pssby n ck gns hUnd Ss n h dg n. hNvy cd h Nv Nwk WCnd nd h Ay sbshd hNwk Enps chngy Cnd(NECOM).

Phps h nx w w n b ughny wh nks nd guns, bu s whcpus nd kybd.q

References

S “Eton” nty n th1. CIA Wod Ftbook:https://www.cia.gov/library/publications/the-world-factbook/geos/en.html 

S BBC nw t Tny Eton Ld2.

Intnt Rvouton: http://news.bbc.co.uk/2/hi/europe/3603943.stm

 A “t ood” dn-o-v ttk3.

n whh o onnton d to v thn th v n hnd.

“SYN ood” ttk nvov th4.

ttkng yt ndng pood SYN (ynhonz) pkt to th tgt. Thtun “dd” on th pkt tund by th tgt do not th vd (o tu) yt, o th tgt v wtong o th tgt o th poo totun n ACK (knowdg) pkt.Evntuy th tgt v w bo

ovwhd wth onnton.  An ICMP ECHO ood ynonyou5.

to png ood, n whh th ttkng hn pdy nd ptdy pngth tgt hn.

Gd Evon, nownd xpt on6.

botnt, hpd n Eton’ dn nd wot th pot-ot ny o thttk. S Gd Evon’ pnttononn t: http://chaosradio.ccc.de/media/ camp/2007/video/CCCamp2007-2050-en-estonia_information_warfare.m4v 

St nd vwb t:7. http:// w8lk8dlaka.livejournal.com/52383.html 

Th “png” ond py nd pkt 8.

o dt qutng th ot hn topond t onn nd vb.

Th utho’ tnton o R9.

to Engh not nt to bty, but gn xpth g.

Gd Evon, nownd xp10.

botnt, hpd n Eton’ dnwot th pot-ot nyttk. S Gd Evon’ ponn t: http://chaosradio.ccc.decamp/2007/video/CCCamp2007-2estonia_information_warfare.m4

Botnt v qunt11.

opod “zob” o  gd towd bng ptdn-o-v ttk. In o-v ttk, th ount o

 gntd by th botnt o tvt hn n hnd, thowng gtt onntontbhd to th vt hn

S Th Gudn t Ru 12.

o unhng ybw to Eton: http://www.guardia

world/2007/may/17/topstories3.rS Eton nd Ru | A yb13.

http://www.economist.com/displacfm?Story_ID=E1_JTGPVJR

S Th Gudn t Ru 14.

o unhng ybw to Eton: http://www.guardiaworld/2007/may/17/topstories3.r

Nh (“Ou!”) govnnt-p15.

Run youth nt-t ov

S t t Sw Bt Ch16.

Co n Lthun:http://ww

chamber.com/index.php?lng=en&id=60&news_id=888

Cyber-RiotsContinued from page 37 

rporationww w .p a r a b e n ,co i

801.796.0944

Paraben Corporat ion

Comprehensive Digital Forensic Solution

Technology • Training • Testimon

The forensic process begins in the field

and ends in our courts. Do you have the

technology and training you need to

combat the 360 degrees of the digital

forensic process?

Copyr ghlQ 2008 Paraben Corporat ionA l ights reserwd ThePMlMn kxjo an a tne 3iC lo-tnix- . logs;¦ -e :i ddcrr.ir.j, or f*g Stored trademarks c-t ParabenCorporation in theUSA. email: orensics@paraben

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 54/57

 

h p : / / i . w 3 .

“Broadband Theft”Continued from page 39

Continued from page 45

Combating Adaptive

Adversaries

S Annu Tht Ant o th17.

Intgn County o th Snt Ad Fo Cott: http://armed-services.senate.gov/statemnt/2008/ February/McConnell%2002-27-08.pdf 

nn. I ws und h h hd s hgh-nd s

nsd n hs sys nd h H‘HACKING MODEM’. H s wndh sg d dvcs szd 800GB pc nd s CD, DVD nd Bu-y dscs. A h ng’s qupnws cnscd s vdnc nd h nws kn n cusdy.

Cyb cns hv xsd n h psnd w cnnu hv n h uu.A d p cus cvy s

pccng g usg h Inn.A gd Inn cuu shud gw yu hs, schs nd cgs ndspd suundng scs. h cybpc, E-Scuy, nd Lw Encnhv p cch up wh h nwchngs nd c chnqus.

h Rsuc Cn CybFnscs (RCCF) C-DAC-Cn Dvpn Advncd Cpung,huvnnhpu s c cpncy cn n Cyb Fnscs sbshd by hDpn Inn chngy (DI), Gvnn Ind. Ou ssns n s nc n InnScuy nd Cyb nscs. hcn hps n cng wnss bucybcs, nvsgn cybcs,nd pvds cyb nsc nyss svcwh s--h- cyb nscs b.

W svng bud spnsv ndpvnv sus ckng cybc.W hppy b p h gbcuny h pus s cbhgh-ch cs css h wd.q

 About the Author 

T.R. Sknth Cyb Fon Anyt wth th Rou Cnt o Cyb Fon (RCCF) n Ind. Sknth hod t’ dg n oput pptonn ddton to wokng xpt n th

  d o yb on nd yb uty.Sknth guy ntt nd tnvtgto o th Lw Enont o n K, Ind. H o gvtu nd pntton n Intuto 

 o th vou tnng pog ondutd 

by RCCF o th ounty.

In vy sh spn , h nysws b bgn wh knwn ck sgnu, us h p dny h dph cps, nd dvpddn pns nusn h wn ny dnd by h uddns syss.

h hun bn hs uy kbby dny bhvs hs nvsn b. h nx-gnn cybdns nd nusn nyss syss wcpz upn hs by by ndng wys b ng h hun nd cyb

dnd. A u-spcu cyb nusndcn nd nyc cpby w ny hv pc ncuds hun-dd nyc s nd chnqus.hs s dny nd p pvusy unknwn ck vcs, b dnghs nn bck n sgnu ndhusc-bsd dns nd nyssss.

h ppcn usd n hs c wsdvpd by Pn chngs n d dns h cpbs qud

p pwu nyss n g ss cyb d. F nn, vswww.palantirtech.com.

Pn chngs ws undh su 2004 by h sh undd nd d Pyp, n bng s hdgs dns, ngnc, nd w ncuns.

References

Sydj, O. S, Cyb Dn1.

Sn n “Counton o th Mh 2004/Vo. 47, No.3.

Kn, Mh,2. http://blogs.tech

com.com/networking/?p=482  ,  Augut 14, 2008

 About the Author 

C Cohn yb nd ntwok nyt wokng wth Thnoog’ govnnt t. HPnt n 2006 nd unty uppnub o dpoynt n th oput dn p.

Th ny onud wth th dntton o g nub o v nvoounton wth th ttkng IP. Ung nkng goth bd on th oodbhvo, th nyt quky tht th opod v ount wth

 goupng o ou IP dd.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 55/57

 

I n f o r m a n t : J u l y 2 0 0 8 - D e c e m b e r 2 0 0 860

Evn App s hs cgnzd h

w ncn ndnvsgs nd sssnc

n dng wh Mcnsh cpus nddvcs. In d ddss hs dnd,App hs spnsd sv sns,Wbcss, nd supp pgs dvd dg nvsgns.

h pv sc hs s cgnzdh nd nng n hs . h nw sv cpns h bh nducy nd dvncd nngn Mcnsh nscs. As I nndpvusy, cgs s bgnnng cuss w-ncn, pvsc, nd dn sudns n h

Mcnsh nscs nd h nn-Wndws-bsd syss (Lnux).

Ahugh s vy dcu kp upwh vy n h s nds, wnd b xy cu h w dn dvp bnd sps n u nvsgvbs. I h cun yu b nvsgv dpn cks h by d wh Mcnsh cpus dvcs,yu hv gng bnd sp h nds b ddssd.q

References

Fon Sotw o M

http://www.onb.o

http://www.bkbgth.o

 Books

Sbod, C. (2008). Bg book o App hk – t dton. Sbtopo, CA: O’Ry

Sngh, A. (2006). M OS X ntn: A ytppoh. Indnpo: Addon-Wy

URLS

http://www.ybon.pudu.du

http://www.n.pp.o/n on/pp/ndx.ht?=207&o=

http://www.oxon.o

Lt Sv

[email protected]

MacintoshForensics

Continued from page 46 

 

This project is supported by Cooperative Agreement Number 2006-GT-T6-K009 administered by the FEMA, National

Preparedness Directorate, National Integration Center, Training and Exercise Integration to the University of 

Memphis Center for Information Assurance.

WEB

 

WEB-

 

-BASED C

 

YBER SE

 

CURITY TRA

 

ININGBASED C

 

YBER SE

 

CURITY TRA

 

INING

Adapt 

 

ive Cyber-Securit 

 

y Training Online

Tra 

 

ini 

 

 

g to p 

 

 

ote 

 

ct Ame 

 

rica’s infor 

 

mat 

 

ion inf  

 

 

ast 

 

 

 

ct 

 

ur 

 

e! 

Sponsored by theSponsored by the

Department of Homeland SecurityDepartment of Homeland Security

Free of Charge to U.S. CitizensFree of Charge to U.S. Citizens

To receive additional information for

ACT-Online, go to www.act-online.net 

Or contact 

Susan Lee (256.428.3653),

Tammy Alexander (901.678.1521)

Cyber Security TrainingCyber Security Training

COMPANY STc/o Success Centerlnc. • 1292 State Route 5 • Unit B • Chittenango ,NY

B^OK 'EM = *ph

'15-687-7800 ' fa x > 315.68

Service@CopSho

Our Company Storesare constantly growing. Each

agency ha s an arrayofproducts exclusive to their own

respective organizations.

Embroidered apparel,luggage, plaques,watches

an d patches are among

the many products we offerinourcompany stores.

WATCHES

"Your good name on our good products."

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 56/57

 

h p : / / i . w 3 .

P e t e r  P a n T i n k e r  B e l l C a  p t a i n  H o o k M r . S n e e d 

Lo s t  B o  y s 

W e n d i 

“What do you mean we’re on the

‘No Fly’ list?”

-NUJ3C CARTOONS

BUSTEDCARTOONIST: CRftlG"3UTTERUJ

C A P T I O N S : CHRISTI RNTJESILET

So many creditards, so little time!

Downloading files now..

4214 6754 94104315 6240 73224311 5517 7234

5107 6044 51105703 6515 35415003 2141 1007

1234 56789101

2345 6760 10113456 7891 0111

How 's that new hackback progam workin

Real good! Got one othe line now! I'm feed

him\google e^poordina

V.

5/13/2018 Informant July-Dec 08 - slidepdf.com

http://slidepdf.com/reader/full/informant-july-dec-08 57/57

 

Memphis is here!

Microsoft®

PhilipMorrisUSAan Altr ia Company

^W American Military University

M M M Q E g¦TEE

CRIME /SUMMIF1

October 6-8, 2DD8

Memphis, TNNATIONAL WHITE COLLAR CRIME CENTER